Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Add fuzzing to zipfile and tarfile modules #141048

Open
Assignees
sethmlarson
Labels
stdlibStandard Library Python modules in the Lib/ directorytype-securityA security issue
@sethmlarson

Description

@sethmlarson

Thezipfile andtarfile modules both are used to processpotentially untrusted inputs from the internet, most relevantly through Python packaging. zipfile and tarfile have security-focused settings to allow unpacking archives into specific directories with the expectation that the contents only affect the directory being unpacked into and not other directories. This gives an easy target to evaluate, whether the filesystem beyond the target directory is modified.

Metadata

Metadata

Assignees

Labels

stdlibStandard Library Python modules in the Lib/ directorytype-securityA security issue

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions


    [8]ページ先頭

    ©2009-2025 Movatter.jp