Skip to content

gh-127681: Fix overflow vulnerabilities in PyMem_Malloc calls #200875

gh-127681: Fix overflow vulnerabilities in PyMem_Malloc calls

gh-127681: Fix overflow vulnerabilities in PyMem_Malloc calls #200875

Triggered via pull request July 10, 2026 08:26
Status Cancelled
Total duration 14m 49s
Artifacts 1

build.yml

on: pull_request
Change detection  /  Create context from changed files
13s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: cifuzz
Check if Autoconf files are up to date
22s
Check if Autoconf files are up to date
Check if generated files are up to date
1m 31s
Check if generated files are up to date
C API Docs  /  Check if all C APIs are documented
8s
C API Docs / Check if all C APIs are documented
iOS
14m 22s
iOS
Emscripten  /  build and test
1m 15s
Emscripten / build and test
WASI  /  build and test
1m 5s
WASI / build and test
Hypothesis tests on Ubuntu
1m 28s
Hypothesis tests on Ubuntu
Sanitizers  /  TSan (free-threading)
14m 19s
Sanitizers / TSan (free-threading)
Cross build Linux
1m 17s
Cross build Linux
Docs  /  Check EPUB
Docs / Check EPUB
Docs  /  Doctest
Docs / Doctest
Docs  /  Docs
Docs / Docs
Matrix: build-android
Docs  /  ...  /  Check for removed HTML IDs
Docs / Check for removed HTML IDs / Check for removed HTML IDs
All required checks pass
2s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

69 errors and 24 warnings
Ubuntu SSL tests (ubuntu-26.04, openssl, 4.0.1)
Process completed with exit code 2.
Ubuntu SSL tests (ubuntu-26.04, openssl, 1.1.1w)
Process completed with exit code 2.
Ubuntu SSL tests (ubuntu-26.04, openssl, 3.4.6)
Process completed with exit code 2.
Ubuntu SSL tests (ubuntu-26.04, openssl, 3.5.7)
Process completed with exit code 2.
WASI / build and test
Process completed with exit code 1.
Android (x86_64)
Process completed with exit code 1.
Ubuntu SSL tests (ubuntu-26.04, openssl, 3.0.21)
Process completed with exit code 2.
Emscripten / build and test
Process completed with exit code 1.
Cross build Linux
Process completed with exit code 2.
Cross build Linux: Python/instrumentation.c#L1782
assignment to ‘uint8_t *’ {aka ‘unsigned char *’} from incompatible pointer type ‘_PyCoLineInstrumentationData *’ [-Wincompatible-pointer-types]
Ubuntu SSL tests (ubuntu-26.04, openssl, 3.6.3)
Process completed with exit code 2.
Ubuntu SSL tests (ubuntu-26.04, aws-lc, 5.0.0)
Process completed with exit code 2.
Hypothesis tests on Ubuntu
Process completed with exit code 2.
Hypothesis tests on Ubuntu: Python/instrumentation.c#L1782
assignment to ‘uint8_t *’ {aka ‘unsigned char *’} from incompatible pointer type ‘_PyCoLineInstrumentationData *’ [-Wincompatible-pointer-types]
Check if generated files are up to date
Process completed with exit code 2.
Ubuntu (bolt) / build and test (ubuntu-26.04)
Process completed with exit code 2.
Ubuntu (bolt) / build and test (ubuntu-26.04): Python/instrumentation.c#L1782
assignment to ‘uint8_t *’ {aka ‘unsigned char *’} from incompatible pointer type ‘_PyCoLineInstrumentationData *’ [-Wincompatible-pointer-types]
Ubuntu / build and test (ubuntu-26.04-arm)
Process completed with exit code 2.
Ubuntu / build and test (ubuntu-26.04-arm): Python/instrumentation.c#L1782
assignment to ‘uint8_t *’ {aka ‘unsigned char *’} from incompatible pointer type ‘_PyCoLineInstrumentationData *’ [-Wincompatible-pointer-types]
Ubuntu / build and test (ubuntu-26.04)
Process completed with exit code 2.
Ubuntu / build and test (ubuntu-26.04): Python/instrumentation.c#L1782
assignment to ‘uint8_t *’ {aka ‘unsigned char *’} from incompatible pointer type ‘_PyCoLineInstrumentationData *’ [-Wincompatible-pointer-types]
Ubuntu (free-threading) / build and test (ubuntu-26.04)
Process completed with exit code 2.
Ubuntu (free-threading) / build and test (ubuntu-26.04): Python/instrumentation.c#L1782
assignment to ‘uint8_t *’ {aka ‘unsigned char *’} from incompatible pointer type ‘_PyCoLineInstrumentationData *’ [-Wincompatible-pointer-types]
Ubuntu (free-threading) / build and test (ubuntu-26.04-arm)
Process completed with exit code 2.
Ubuntu (free-threading) / build and test (ubuntu-26.04-arm): Python/instrumentation.c#L1782
assignment to ‘uint8_t *’ {aka ‘unsigned char *’} from incompatible pointer type ‘_PyCoLineInstrumentationData *’ [-Wincompatible-pointer-types]
Address sanitizer (ubuntu-26.04)
Process completed with exit code 2.
Address sanitizer (ubuntu-26.04): Python/instrumentation.c#L1782
assignment to ‘uint8_t *’ {aka ‘unsigned char *’} from incompatible pointer type ‘_PyCoLineInstrumentationData *’ [-Wincompatible-pointer-types]
macOS / build and test (macos-26-intel)
Process completed with exit code 1.
CIFuzz / cpython3 (memory)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
CIFuzz / cpython3 (memory)
Path does not exist: cifuzz-sarif/results.sarif
CIFuzz / cpython3 (memory)
The operation was canceled.
CIFuzz / cpython3 (address)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
CIFuzz / cpython3 (address)
Path does not exist: cifuzz-sarif/results.sarif
CIFuzz / cpython3 (address)
The operation was canceled.
CIFuzz / cpython3 (undefined)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
CIFuzz / cpython3 (undefined)
Path does not exist: cifuzz-sarif/results.sarif
CIFuzz / cpython3 (undefined)
The operation was canceled.
CIFuzz / python3-libraries (address)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
CIFuzz / python3-libraries (address)
Path does not exist: cifuzz-sarif/results.sarif
CIFuzz / python3-libraries (address)
The operation was canceled.
Windows (free-threading) / Build and test (x64, switch-case)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Windows (free-threading) / Build and test (x64, switch-case)
The operation was canceled.
Windows / Build and test (x64, switch-case)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Windows / Build and test (x64, switch-case)
The operation was canceled.
Windows / Build and test (Win32, switch-case)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Windows / Build and test (Win32, switch-case)
The operation was canceled.
Windows (free-threading) / Build and test (arm64, switch-case)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Windows (free-threading) / Build and test (arm64, switch-case)
The operation was canceled.
Sanitizers / UBSan
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Sanitizers / UBSan
The operation was canceled.
Windows / Build and test (arm64, switch-case)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Windows / Build and test (arm64, switch-case)
The operation was canceled.
Sanitizers / TSan (free-threading)
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Sanitizers / TSan (free-threading)
The operation was canceled.
iOS
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
iOS
The operation was canceled.
All required checks pass
Process completed with exit code 1.
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Tests
Canceling since a higher priority waiting request for Tests-pranavchoudhary-tech-fix/overflows-127681 exists
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
Ubuntu (bolt) / build and test (ubuntu-26.04): Modules/_zoneinfo.c#L1050
pointer targets in assignment from ‘Py_ssize_t *’ {aka ‘long int *’} to ‘size_t *’ {aka ‘long unsigned int *’} differ in signedness [-Wpointer-sign]
Ubuntu / build and test (ubuntu-26.04-arm): Modules/_zoneinfo.c#L1050
pointer targets in assignment from ‘Py_ssize_t *’ {aka ‘long int *’} to ‘size_t *’ {aka ‘long unsigned int *’} differ in signedness [-Wpointer-sign]
Ubuntu / build and test (ubuntu-26.04): Modules/_zoneinfo.c#L1050
pointer targets in assignment from ‘Py_ssize_t *’ {aka ‘long int *’} to ‘size_t *’ {aka ‘long unsigned int *’} differ in signedness [-Wpointer-sign]
Ubuntu (free-threading) / build and test (ubuntu-26.04): Modules/_zoneinfo.c#L1050
pointer targets in assignment from ‘Py_ssize_t *’ {aka ‘long int *’} to ‘size_t *’ {aka ‘long unsigned int *’} differ in signedness [-Wpointer-sign]
Ubuntu (free-threading) / build and test (ubuntu-26.04-arm): Modules/_zoneinfo.c#L1050
pointer targets in assignment from ‘Py_ssize_t *’ {aka ‘long int *’} to ‘size_t *’ {aka ‘long unsigned int *’} differ in signedness [-Wpointer-sign]
macOS / build and test (macos-26-intel)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26-intel)
The following taps are not trusted: aws/tap Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required. Untap them with: brew untap aws/tap Trust specific formulae, casks and commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> Whole-tap trust is broader and includes all current and future formulae, casks and commands from the listed taps. Trust whole taps with: brew trust aws/tap To disable trust checks: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release. For more information, see: https://docs.brew.sh/Tap-Trust
Windows / Build and test (x64, tail-call): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [D:\a\cpython\cpython\PCbuild\pythoncore.vcxproj]
Windows / Build and test (x64, tail-call): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
macOS / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26)
The following taps are not trusted: aws/tap Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required. Untap them with: brew untap aws/tap Trust specific formulae, casks and commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> Whole-tap trust is broader and includes all current and future formulae, casks and commands from the listed taps. Trust whole taps with: brew trust aws/tap To disable trust checks: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release. For more information, see: https://docs.brew.sh/Tap-Trust
Windows (free-threading) / Build and test (x64, tail-call): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [D:\a\cpython\cpython\PCbuild\pythoncore.vcxproj]
Windows (free-threading) / Build and test (x64, tail-call): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
macOS (free-threading) / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS (free-threading) / build and test (macos-26)
The following taps are not trusted: aws/tap Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required. Untap them with: brew untap aws/tap Trust specific formulae, casks and commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> Whole-tap trust is broader and includes all current and future formulae, casks and commands from the listed taps. Trust whole taps with: brew trust aws/tap To disable trust checks: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release. For more information, see: https://docs.brew.sh/Tap-Trust
Windows (free-threading) / Build and test (x64, switch-case): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [D:\a\cpython\cpython\PCbuild\pythoncore.vcxproj]
Windows (free-threading) / Build and test (x64, switch-case): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / Build and test (x64, switch-case): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [D:\a\cpython\cpython\PCbuild\pythoncore.vcxproj]
Windows / Build and test (x64, switch-case): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / Build and test (arm64, switch-case): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [C:\a\cpython\cpython\PCbuild\pythoncore.vcxproj]
Windows (free-threading) / Build and test (arm64, switch-case): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / Build and test (arm64, switch-case): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [C:\a\cpython\cpython\PCbuild\pythoncore.vcxproj]
Windows / Build and test (arm64, switch-case): Python/instrumentation.c#L1782
'=': incompatible types - from '_PyCoLineInstrumentationData *' to 'uint8_t *' [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]

Artifacts

Produced during runtime
Name Size Digest
UBSan-logs-default
363 Bytes
sha256:32650957d2a539c4c9fc0b5d7edf2df733e5e0c238cdfd417f8ed343b5bf1cd1