Skip to content

[3.13] gh-160097: Reject links replacing the destination in tarfile.tar_filter (GH-160098) #215730

[3.13] gh-160097: Reject links replacing the destination in tarfile.tar_filter (GH-160098)

[3.13] gh-160097: Reject links replacing the destination in tarfile.tar_filter (GH-160098) #215730

Triggered via pull request October 22, 2026 20:23
Status Failure
Total duration 59m 34s
Artifacts 3

build.yml

on: pull_request
Change detection  /  Create context from changed files
13s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: cifuzz
Docs  /  Docs
2m 7s
Docs / Docs
Docs  /  Doctest
4m 47s
Docs / Doctest
Docs  /  Check EPUB
1m 45s
Docs / Check EPUB
Check if Autoconf files are up to date
36s
Check if Autoconf files are up to date
Check if generated files are up to date
14m 4s
Check if generated files are up to date
C API Docs  /  Check if all C APIs are documented
13s
C API Docs / Check if all C APIs are documented
Ubuntu (installed)  /  build, install and test
5m 8s
Ubuntu (installed) / build, install and test
WASI  /  build and test
7m 30s
WASI / build and test
Hypothesis tests on Ubuntu
7m 27s
Hypothesis tests on Ubuntu
Check if the ABI has changed
1m 37s
Check if the ABI has changed
Matrix: build-android
All required checks pass
4s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

2 errors, 26 warnings, and 11 notices
Docs / Check EPUB
Process completed with exit code 1.
Docs / Docs
Process completed with exit code 2.
Check if the ABI has changed
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
Windows (free-threading) / build (arm64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Windows / build (arm64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Python/import.c#L1197
‘__builtin_strncpy’ output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation]
Address sanitizer (ubuntu-24.04): Include/internal/pycore_dict.h#L302
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Windows / build and test (x64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Windows (free-threading) / build and test (x64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Change detection / Create context from changed files
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
C API Docs / Check if all C APIs are documented
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Docs / Check EPUB
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Docs / Docs
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
CIFuzz / cpython3 (memory)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
CIFuzz / cpython3 (undefined)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
CIFuzz / python3-libraries (address)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Android (aarch64)
Due to capacity constraints, jobs targeting macOS arm64 runners may experience longer queue times.
macOS (free-threading) / build and test (macos-26)
Due to capacity constraints, jobs targeting macOS arm64 runners may experience longer queue times.
macOS / build and test (macos-26)
Due to capacity constraints, jobs targeting macOS arm64 runners may experience longer queue times.
All required checks pass
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
TSan-logs-free-threading
1.77 KB
sha256:e4f1ab225c4c5e3d9b23c0ccafac14f7ee1e1e1cdc4c744d9e2e727011cf01e1
memory-artifacts
1.91 KB
sha256:c5fdf2b55d3efde63e136b75eb6090b98cddba018b6dee9915ce072935fb1e2c
undefined-artifacts
1.89 KB
sha256:54143058ef1ad37f2a60856ee2ff32cf5f920b622ba9acb6d810b89b7b2a38cb