gh-90949: add Expat API to prevent XML deadly allocations#139234

Merged

picnixz merged 33 commits into

python:mainfrom

picnixz:feat/xml/mitigation-api-90949

Sep 26, 2025

Commits on Sep 22, 2025

Expose XML Expat 2.7.2 mitigation APIs
picnixz
committed
c1c23fb
Copy full SHA for c1c23fb
add tests
picnixz
committed
12bef9c
Copy full SHA for 12bef9c
docs
picnixz
committed
1d7e599
Copy full SHA for 1d7e599
NEWS
picnixz
committed
3dcd9bd
Copy full SHA for 3dcd9bd
Merge branch 'main' into feat/xml/mitigation-api-90949
picnixz
committed
192fe08
Copy full SHA for 192fe08
fix docs
picnixz
committed
0ecbd55
Copy full SHA for 0ecbd55
fix tests
picnixz
committed
07445ad
Copy full SHA for 07445ad
regen SBOM
picnixz
committed
9c7371f
Copy full SHA for 9c7371f
remove unused include
picnixz
committed
1085584
Copy full SHA for 1085584
fix possible error handling
picnixz
committed
c10fe91
Copy full SHA for c10fe91
undef macro after usage
picnixz
committed
18d175f
Copy full SHA for 18d175f
Update Lib/test/test_pyexpat.py
picnixz
authored
911b2b7
Copy full SHA for 911b2b7
update comments
picnixz
committed
d636685
Copy full SHA for d636685
use better test names
picnixz
committed
b951065
Copy full SHA for b951065
simplify roles usage
picnixz
committed
e11bf14
Copy full SHA for e11bf14
prevent reparse deferral of Expat to blow up
picnixz
committed
3e45613
Copy full SHA for 3e45613
test better numeric values
picnixz
committed
fb83fb5
Copy full SHA for fb83fb5
update docs
picnixz
committed
7f91f2e
Copy full SHA for 7f91f2e
avoid deprecated `XML_GetError{Line,Column}Number`
picnixz
committed
64af05c
Copy full SHA for 64af05c
raise `NotImplementedError` for unavailable mitigation APIs
picnixz
committed
b01e53d
Copy full SHA for b01e53d

Commits on Sep 23, 2025

improve various wordings
picnixz
committed
cd040bf
Copy full SHA for cd040bf
avoid SBOM alteration
picnixz
committed
a09cd15
Copy full SHA for a09cd15
regen files
picnixz
committed
a3fc3b3
Copy full SHA for a3fc3b3
improve test assertions
picnixz
committed
5afe1ad
Copy full SHA for 5afe1ad
improve test genericity
picnixz
committed
b6949dd
Copy full SHA for b6949dd
split tests even if they could end up duplicated
picnixz
committed
bdbd382
Copy full SHA for bdbd382
raise AttributeError when method is not available and reorder interface
picnixz
committed
0c03735
Copy full SHA for 0c03735
reoder docs
picnixz
committed
220f3e2
Copy full SHA for 220f3e2

Commits on Sep 24, 2025

address review
picnixz
committed
9d538e4
Copy full SHA for 9d538e4
update capsule API
picnixz
committed
209f300
Copy full SHA for 209f300
amend docs
picnixz
committed
8407cfc
Copy full SHA for 8407cfc
use "NOTE:"
picnixz
committed
e898811
Copy full SHA for e898811

Commits on Sep 26, 2025

address final comments
picnixz
committed
ce8cb48
Copy full SHA for ce8cb48

Search code, repositories, users, issues, pull requests...

Uh oh!

Commits

Commits on Sep 22, 2025

Commits on Sep 23, 2025

Commits on Sep 24, 2025

Commits on Sep 26, 2025