Skip to content

[3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) #171863

[3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)

[3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) #171863

Triggered via pull request November 2, 2025 12:14
Status Success
Total duration 17m 54s
Artifacts

build.yml

on: pull_request
Change detection  /  Create context from changed files
11s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-tsan
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Docs  /  Docs
1m 32s
Docs / Docs
Docs  /  Doctest
8m 28s
Docs / Doctest
Check if Autoconf files are up to date
29s
Check if Autoconf files are up to date
Check if generated files are up to date
6m 49s
Check if generated files are up to date
Hypothesis tests on Ubuntu
8m 10s
Hypothesis tests on Ubuntu
Check if the ABI has changed
1m 54s
Check if the ABI has changed
All required checks pass
3s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

1 error and 23 warnings
Docs / Docs
Process completed with exit code 2.
Docs / Docs: Doc/library/pyexpat.rst#L291
py:class reference target not found: xmlparser [ref.class]
Docs / Docs: Doc/library/pyexpat.rst#L83
py:attr reference target not found: EndElementHandler [ref.attr]
Docs / Docs: Doc/library/pyexpat.rst#L83
py:attr reference target not found: StartElementHandler [ref.attr]
Check if the ABI has changed
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.15): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.1.7): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.3.2): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.2.3): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
macOS / build and test (macos-14)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-14)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS / build and test (macos-14)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS / build and test (macos-14)
xz 5.8.1 is already installed and up-to-date. To reinstall 5.8.1, run: brew reinstall xz
macOS / build and test (macos-14)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf
Hypothesis tests on Ubuntu
No files were found with the provided path: .hypothesis/examples/. No artifacts will be uploaded.
Hypothesis tests on Ubuntu: Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Address sanitizer (ubuntu-24.04)
‘__builtin_strncpy’ output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation]
Address sanitizer (ubuntu-24.04): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu / build and test (ubuntu-24.04): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
macOS / build and test (macos-15-intel)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-15-intel)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS / build and test (macos-15-intel)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS / build and test (macos-15-intel)
xz 5.8.1 is already installed and up-to-date. To reinstall 5.8.1, run: brew reinstall xz
macOS / build and test (macos-15-intel)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf