Thanks to visit codestin.com
Credit goes to github.com

Skip to content

gh-135034: Normalize link targets in tarfile, add os.path.realpath(strict='allow_missing') #135037

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 20 commits into from
Jun 3, 2025
Merged

gh-135034: Normalize link targets in tarfile, add os.path.realpath(strict='allow_missing') #135037

Changes from 1 commit
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
0c16f5f
gh-135034: Normalize link targets in tarfile, add `os.path.realpath(s…
ambv Jun 2, 2025
335921b
Fix lint
ambv Jun 2, 2025
fcefa72
Add blurb
sethmlarson Jun 2, 2025
9c275a7
Fix test_tarfile on WASI
ambv Jun 2, 2025
b59eaaa
Remove spurious line
ambv Jun 2, 2025
fd5ba13
Fix invalid parent directory unwinding in test
ambv Jun 2, 2025
aeebdc8
Make tests more chatty
ambv Jun 2, 2025
f5544e6
Use a better skip
ambv Jun 2, 2025
3c5ed15
Work around Windows test failures
ambv Jun 2, 2025
5af66c6
Add ERROR_ACCESS_DENIED
encukou Jun 2, 2025
a124c42
Switch to singleton
encukou Jun 2, 2025
5bf4a48
Add ENAMETOOLONG to expected failures. And an extra subTest.
encukou Jun 2, 2025
3b54acd
Discard more special files
encukou Jun 2, 2025
7ff96a2
Use shorter names on Android
encukou Jun 2, 2025
f845343
Fix docs warning
encukou Jun 3, 2025
fd2013a
Attempt to restore ntpath test
ambv Jun 3, 2025
f8f2786
Revert "Attempt to restore ntpath test"
ambv Jun 3, 2025
4ec9fea
Don't guess component lengths when PC_PATH_MAX is available
ambv Jun 3, 2025
5c92d7b
Allow for can_hardlink() being false even if hardlinking is possible
encukou Jun 3, 2025
29c7b31
Skip PermissionError test for root
encukou Jun 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Remove spurious line
  • Loading branch information
@ambv
ambv committed Jun 2, 2025
commit b59eaaad77638f634654293d452b1e694944c75f
1 change: 0 additions & 1 deletion Misc/NEWS.d/next/Security/2025-06-02-11-32-23.gh-issue-135034.RLGjbp.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
cat Misc/NEWS.d/next/Security/2025-06-02-11-32-23.gh-issue-135034.RLGjbp.rst
Fixes multiple issues that allowed ``tarfile`` extraction filters
(``filter="data"`` and ``filter="tar"``) to be bypassed using crafted
symlinks and hard links.
Expand Down
Loading