mirror of
https://github.com/python/cpython
synced 2026-11-06 09:02:40 +03:00
* [3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) Expose the XML Expat 2.7.2 mitigation APIs to disallow use of disproportional amounts of dynamic memory from within an Expat parser (see CVE-2025-59375 for instance). The exposed APIs are available on Expat parsers, that is, parsers created by `xml.parsers.expat.ParserCreate()`, as: - `parser.SetAllocTrackerActivationThreshold(threshold)`, and - `parser.SetAllocTrackerMaximumAmplification(max_factor)`. (cherry picked from commit |
||
|---|---|---|
| .. | ||
| _abc.c.h | ||
| _asynciomodule.c.h | ||
| _bisectmodule.c.h | ||
| _bz2module.c.h | ||
| _codecsmodule.c.h | ||
| _collectionsmodule.c.h | ||
| _contextvarsmodule.c.h | ||
| _cryptmodule.c.h | ||
| _csv.c.h | ||
| _curses_panel.c.h | ||
| _cursesmodule.c.h | ||
| _datetimemodule.c.h | ||
| _dbmmodule.c.h | ||
| _elementtree.c.h | ||
| _functoolsmodule.c.h | ||
| _gdbmmodule.c.h | ||
| _hashopenssl.c.h | ||
| _heapqmodule.c.h | ||
| _localemodule.c.h | ||
| _lsprof.c.h | ||
| _lzmamodule.c.h | ||
| _opcode.c.h | ||
| _operator.c.h | ||
| _pickle.c.h | ||
| _posixsubprocess.c.h | ||
| _queuemodule.c.h | ||
| _randommodule.c.h | ||
| _ssl.c.h | ||
| _statisticsmodule.c.h | ||
| _struct.c.h | ||
| _testclinic.c.h | ||
| _testinternalcapi.c.h | ||
| _testmultiphase.c.h | ||
| _tkinter.c.h | ||
| _tracemalloc.c.h | ||
| _typingmodule.c.h | ||
| _weakref.c.h | ||
| _winapi.c.h | ||
| _zoneinfo.c.h | ||
| arraymodule.c.h | ||
| audioop.c.h | ||
| binascii.c.h | ||
| cmathmodule.c.h | ||
| fcntlmodule.c.h | ||
| gcmodule.c.h | ||
| grpmodule.c.h | ||
| itertoolsmodule.c.h | ||
| mathmodule.c.h | ||
| md5module.c.h | ||
| overlapped.c.h | ||
| posixmodule.c.h | ||
| pwdmodule.c.h | ||
| pyexpat.c.h | ||
| readline.c.h | ||
| resource.c.h | ||
| selectmodule.c.h | ||
| sha1module.c.h | ||
| sha2module.c.h | ||
| sha3module.c.h | ||
| signalmodule.c.h | ||
| socketmodule.c.h | ||
| spwdmodule.c.h | ||
| symtablemodule.c.h | ||
| syslogmodule.c.h | ||
| termios.c.h | ||
| unicodedata.c.h | ||
| zlibmodule.c.h | ||