Skip to content

[3.12] gh-157190: Fix tarfile data/tar filter bypass via hard link to a symlink (GH-157191) (GH-157192) #209368

[3.12] gh-157190: Fix tarfile data/tar filter bypass via hard link to a symlink (GH-157191) (GH-157192)

[3.12] gh-157190: Fix tarfile data/tar filter bypass via hard link to a symlink (GH-157191) (GH-157192) #209368

Triggered via pull request September 13, 2026 19:26
Status Failure
Total duration 15m 40s
Artifacts

build.yml

on: pull_request
Change detection  /  Create context from changed files
9s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-tsan
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows
Docs  /  Docs
2m 15s
Docs / Docs
Docs  /  Doctest
6m 15s
Docs / Doctest
Check if Autoconf files are up to date
29s
Check if Autoconf files are up to date
Check if generated files are up to date
4m 22s
Check if generated files are up to date
Hypothesis tests on Ubuntu
7m 47s
Hypothesis tests on Ubuntu
Check if the ABI has changed
1m 54s
Check if the ABI has changed
All required checks pass
3s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

12 errors and 19 warnings
Docs / Docs
Process completed with exit code 1.
Docs / Docs
Process completed with exit code 2.
macOS / build and test (macos-26)
Process completed with exit code 2.
Hypothesis tests on Ubuntu
Process completed with exit code 2.
Ubuntu / build and test (ubuntu-24.04)
Process completed with exit code 2.
Address sanitizer (ubuntu-24.04)
Process completed with exit code 2.
Windows / build and test (x64)
Process completed with exit code 2.
Windows / build and test (Win32)
The strategy configuration was canceled because "build-windows.x64_false" failed
Windows / build and test (Win32)
The operation was canceled.
macOS / build and test (macos-26-intel)
Process completed with exit code 2.
All required checks pass
Process completed with exit code 1.
Tests
The strategy configuration was canceled because "build-windows.x64_false" failed
Check if the ABI has changed
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.15)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.15): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.3.2)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.3.2): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.1.7)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.1.7): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Check if generated files are up to date
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.2.3)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.2.3): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Thread sanitizer / Thread sanitizer
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypothesis tests on Ubuntu
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypothesis tests on Ubuntu
No files were found with the provided path: .hypothesis/examples/. No artifacts will be uploaded.
Hypothesis tests on Ubuntu: Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu / build and test (ubuntu-24.04)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu / build and test (ubuntu-24.04): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Address sanitizer (ubuntu-24.04)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Address sanitizer (ubuntu-24.04)
‘__builtin_strncpy’ output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation]
Address sanitizer (ubuntu-24.04): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]