Skip to content

[CVE-2019-20907] Infinite loop in the tarfile module #83198

Description

@jvoisin
mannequin
BPO 39017
Nosy @gustaebel, @larryhastings, @ned-deily, @encukou, @ethanfurman, @mgorny, @serhiy-storchaka, @miss-islington, @bcaller, @rishi93
PRs
  • bpo-39017 Fix infinite loop in the tarfile module #21454
  • [3.9] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) #21482
  • [3.8] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) #21483
  • [3.7] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) #21484
  • [3.6] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) #21485
  • [3.5] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) #21489
  • Files
  • timeout-a52710a313fdb35fb428c3399277cb640fe2f686: Infinite loop reproducer.
  • recursion.tar: Minimal infinite loop reproducer
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = <Date 2020-07-16.19:49:38.415>
    created_at = <Date 2019-12-10.16:19:56.633>
    labels = ['type-security', '3.7', '3.8', '3.9', '3.10']
    title = '[CVE-2019-20907] Infinite loop in the tarfile module'
    updated_at = <Date 2020-08-03.10:07:01.350>
    user = 'https://bugs.python.org/jvoisin'

    bugs.python.org fields:

    activity = <Date 2020-08-03.10:07:01.350>
    actor = 'vstinner'
    assignee = 'none'
    closed = True
    closed_date = <Date 2020-07-16.19:49:38.415>
    closer = 'larry'
    components = []
    creation = <Date 2019-12-10.16:19:56.633>
    creator = 'jvoisin'
    dependencies = []
    files = ['48768', '49309']
    hgrepos = []
    issue_num = 39017
    keywords = ['patch']
    message_count = 17.0
    messages = ['358200', '373339', '373341', '373468', '373473', '373577', '373632', '373681', '373683', '373684', '373685', '373686', '373687', '373688', '373689', '373764', '373972']
    nosy_count = 11.0
    nosy_names = ['lars.gustaebel', 'larry', 'ned.deily', 'petr.viktorin', 'ethan.furman', 'mgorny', 'serhiy.storchaka', 'miss-islington', 'bc', 'jvoisin', 'rishi93']
    pr_nums = ['21454', '21482', '21483', '21484', '21485', '21489']
    priority = 'normal'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue39017'
    versions = ['Python 3.5', 'Python 3.6', 'Python 3.7', 'Python 3.8', 'Python 3.9', 'Python 3.10']

    Activity

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Metadata

    Metadata

    Assignees

    No one assigned

      Projects

      No projects

        Milestone

        No milestone

        Relationships

        None yet

        Development

        No branches or pull requests

        Issue actions