cpython/Modules/clinic
Bénédikt Tran bf2865f80f
Some checks are pending
Tests / Change detection (push) Waiting to run
Tests / Docs (push) Blocked by required conditions
Tests / Check if the ABI has changed (push) Blocked by required conditions
Tests / Check if Autoconf files are up to date (push) Blocked by required conditions
Tests / Check if generated files are up to date (push) Blocked by required conditions
Tests / (push) Blocked by required conditions
Tests / Windows MSI (push) Blocked by required conditions
Tests / Ubuntu SSL tests with OpenSSL (push) Blocked by required conditions
Tests / Android (aarch64) (push) Blocked by required conditions
Tests / Android (x86_64) (push) Blocked by required conditions
Tests / iOS (push) Blocked by required conditions
Tests / WASI (push) Blocked by required conditions
Tests / Hypothesis tests on Ubuntu (push) Blocked by required conditions
Tests / Address sanitizer (push) Blocked by required conditions
Tests / Sanitizers (push) Blocked by required conditions
Tests / Cross build Linux (push) Blocked by required conditions
Tests / CIFuzz (push) Blocked by required conditions
Tests / All required checks pass (push) Blocked by required conditions
Lint / lint (push) Waiting to run
[3.14] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139359)
* [3.14] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)

Expose the XML Expat 2.7.2 mitigation APIs to disallow use of
disproportional amounts of dynamic memory from within an Expat
parser (see CVE-2025-59375 for instance).

The exposed APIs are available on Expat parsers, that is,
parsers created by `xml.parsers.expat.ParserCreate()`, as:

- `parser.SetAllocTrackerActivationThreshold(threshold)`, and
- `parser.SetAllocTrackerMaximumAmplification(max_factor)`.

(cherry picked from commit f04bea44c3)
(cherry picked from commit 68a1778b77)
2025-11-02 09:33:36 +00:00
..
_abc.c.h
_asynciomodule.c.h
_bisectmodule.c.h
_bz2module.c.h
_codecsmodule.c.h
_collectionsmodule.c.h
_csv.c.h
_curses_panel.c.h
_cursesmodule.c.h
_datetimemodule.c.h
_dbmmodule.c.h
_elementtree.c.h
_functoolsmodule.c.h
_gdbmmodule.c.h
_hashopenssl.c.h
_heapqmodule.c.h
_localemodule.c.h
_lsprof.c.h
_lzmamodule.c.h
_opcode.c.h
_operator.c.h
_pickle.c.h
_posixsubprocess.c.h
_queuemodule.c.h
_randommodule.c.h
_remote_debugging_module.c.h
_ssl.c.h
_statisticsmodule.c.h
_struct.c.h
_suggestions.c.h
_sysconfig.c.h
_testclinic.c.h
_testclinic_depr.c.h
_testclinic_limited.c.h
_testinternalcapi.c.h
_testmultiphase.c.h
_threadmodule.c.h
_tkinter.c.h
_tracemalloc.c.h
_typingmodule.c.h
_weakref.c.h
_winapi.c.h
_zoneinfo.c.h
arraymodule.c.h
binascii.c.h
blake2module.c.h
cmathmodule.c.h
fcntlmodule.c.h
gcmodule.c.h
grpmodule.c.h
hmacmodule.c.h
itertoolsmodule.c.h
mathmodule.c.h
md5module.c.h
mmapmodule.c.h
overlapped.c.h
posixmodule.c.h
pwdmodule.c.h
pyexpat.c.h
readline.c.h
resource.c.h
selectmodule.c.h
sha1module.c.h
sha2module.c.h
sha3module.c.h
signalmodule.c.h
socketmodule.c.h
symtablemodule.c.h
syslogmodule.c.h
termios.c.h
timemodule.c.h
unicodedata.c.h
zlibmodule.c.h