Skip to content

[3.14] gh-156939: Fix xmlcharrefreplace() buffer overflow (GH-157109) #208833

[3.14] gh-156939: Fix xmlcharrefreplace() buffer overflow (GH-157109)

[3.14] gh-156939: Fix xmlcharrefreplace() buffer overflow (GH-157109) #208833

Triggered via pull request September 9, 2026 19:18
Status Failure
Total duration 4m 25s
Artifacts 1

build.yml

on: pull_request
Change detection  /  Create context from changed files
13s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: cifuzz
Waiting for pending jobs
Check if Autoconf files are up to date
28s
Check if Autoconf files are up to date
Check if generated files are up to date
1m 33s
Check if generated files are up to date
C API Docs  /  Check if all C APIs are documented
12s
C API Docs / Check if all C APIs are documented
Ubuntu (installed)  /  build, install and test
1m 47s
Ubuntu (installed) / build, install and test
iOS
2m 9s
iOS
Emscripten  /  build and test
1m 2s
Emscripten / build and test
WASI  /  build and test
51s
WASI / build and test
Hypothesis tests on Ubuntu
58s
Hypothesis tests on Ubuntu
Cross build Linux
1m 24s
Cross build Linux
Docs  /  Check EPUB
Docs / Check EPUB
Docs  /  Docs
Docs / Docs
Docs  /  Doctest
Docs / Doctest
Check if the ABI has changed
1m 5s
Check if the ABI has changed
Matrix: build-android
All required checks pass
3s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

63 errors, 8 warnings, and 2 notices
Windows / Build and test (Win32)
Process completed with exit code 1.
WASI / build and test
Process completed with exit code 1.
Android (x86_64)
Process completed with exit code 1.
Windows (free-threading) / Build and test (x64)
Process completed with exit code 1.
Windows (free-threading) / Build and test (x64): Objects/unicodeobject.c#L966
cannot allocate an array of constant size 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / Build and test (x64): Objects/unicodeobject.c#L966
expected constant expression [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / Build and test (x64): Objects/unicodeobject.c#L966
'_Py_MAX_UNICODE': undeclared identifier [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Hypothesis tests on Ubuntu
Process completed with exit code 2.
Hypothesis tests on Ubuntu: Include/pymacro.h#L124
expression in static assertion is not an integer
Hypothesis tests on Ubuntu: Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Emscripten / build and test
Process completed with exit code 1.
Windows / Build and test (x64)
Process completed with exit code 1.
Windows / Build and test (x64): Objects/unicodeobject.c#L966
cannot allocate an array of constant size 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / Build and test (x64): Objects/unicodeobject.c#L966
expected constant expression [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / Build and test (x64): Objects/unicodeobject.c#L966
'_Py_MAX_UNICODE': undeclared identifier [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Check if the ABI has changed
Process completed with exit code 2.
Ubuntu SSL tests (ubuntu-26.04, openssl, 3.6.4)
Process completed with exit code 2.
Ubuntu SSL tests (ubuntu-26.04, openssl, 1.1.1w)
Process completed with exit code 2.
Windows / Build and test (arm64)
Process completed with exit code 1.
Windows / Build and test (arm64): Objects/unicodeobject.c#L966
cannot allocate an array of constant size 0 [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / Build and test (arm64): Objects/unicodeobject.c#L966
expected constant expression [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / Build and test (arm64): Objects/unicodeobject.c#L966
'_Py_MAX_UNICODE': undeclared identifier [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Ubuntu / build and test (ubuntu-24.04-arm)
Process completed with exit code 2.
Ubuntu / build and test (ubuntu-24.04-arm): Include/pymacro.h#L124
expression in static assertion is not an integer
Ubuntu / build and test (ubuntu-24.04-arm): Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Cross build Linux
Process completed with exit code 2.
Cross build Linux: Include/pymacro.h#L124
expression in static assertion is not an integer
Cross build Linux: Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Ubuntu SSL tests (ubuntu-26.04, openssl, 3.4.7)
Process completed with exit code 2.
Windows (free-threading) / Build and test (arm64)
Process completed with exit code 1.
Windows (free-threading) / Build and test (arm64): Objects/unicodeobject.c#L966
cannot allocate an array of constant size 0 [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / Build and test (arm64): Objects/unicodeobject.c#L966
expected constant expression [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / Build and test (arm64): Objects/unicodeobject.c#L966
'_Py_MAX_UNICODE': undeclared identifier [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Ubuntu SSL tests (ubuntu-26.04, openssl, 3.0.22)
Process completed with exit code 2.
Check if generated files are up to date
Process completed with exit code 2.
Android (aarch64)
Process completed with exit code 1.
Ubuntu (free-threading) / build and test (ubuntu-24.04-arm)
Process completed with exit code 2.
Ubuntu (free-threading) / build and test (ubuntu-24.04-arm): Include/pymacro.h#L124
expression in static assertion is not an integer
Ubuntu (free-threading) / build and test (ubuntu-24.04-arm): Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Ubuntu / build and test (ubuntu-24.04)
Process completed with exit code 2.
Ubuntu / build and test (ubuntu-24.04): Include/pymacro.h#L124
expression in static assertion is not an integer
Ubuntu / build and test (ubuntu-24.04): Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Address sanitizer (ubuntu-26.04)
Process completed with exit code 2.
Address sanitizer (ubuntu-26.04): Include/pymacro.h#L124
expression in static assertion is not an integer
Address sanitizer (ubuntu-26.04): Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
macOS (free-threading) / build and test (macos-26)
Process completed with exit code 2.
Ubuntu (free-threading) / build and test (ubuntu-24.04)
Process completed with exit code 2.
Ubuntu (free-threading) / build and test (ubuntu-24.04): Include/pymacro.h#L124
expression in static assertion is not an integer
Ubuntu (free-threading) / build and test (ubuntu-24.04): Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Ubuntu (installed) / build, install and test
Process completed with exit code 2.
Ubuntu (installed) / build, install and test: Include/pymacro.h#L124
expression in static assertion is not an integer
Ubuntu (installed) / build, install and test: Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Ubuntu SSL tests (ubuntu-26.04, openssl, 3.5.8)
Process completed with exit code 2.
macOS / build and test (macos-26)
Process completed with exit code 2.
Sanitizers / UBSan
Process completed with exit code 2.
Ubuntu (bolt) / build and test (ubuntu-24.04)
Process completed with exit code 2.
Ubuntu (bolt) / build and test (ubuntu-24.04): Include/pymacro.h#L124
expression in static assertion is not an integer
Ubuntu (bolt) / build and test (ubuntu-24.04): Objects/unicodeobject.c#L966
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Sanitizers / TSan
Process completed with exit code 2.
Sanitizers / TSan (free-threading)
Process completed with exit code 2.
iOS
Process completed with exit code 1.
macOS / build and test (macos-26-intel)
Process completed with exit code 2.
All required checks pass
Process completed with exit code 1.
Windows (free-threading) / Build and test (x64): Objects/unicodeobject.c#L966
sizeof returns 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
Windows / Build and test (x64): Objects/unicodeobject.c#L966
sizeof returns 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / Build and test (arm64): Objects/unicodeobject.c#L966
sizeof returns 0 [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / Build and test (arm64): Objects/unicodeobject.c#L966
sizeof returns 0 [C:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
macOS (free-threading) / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26-intel)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
Windows / Build and test (arm64)
"The windows-11-arm label will migrate to use Visual Studio 2026 by default beginning September 21, 2026. For more information see https://github.com/actions/runner-images/issues/14602"
Windows (free-threading) / Build and test (arm64)
"The windows-11-arm label will migrate to use Visual Studio 2026 by default beginning September 21, 2026. For more information see https://github.com/actions/runner-images/issues/14602"

Artifacts

Produced during runtime
Name Size Digest
UBSan-logs-default
386 Bytes
sha256:5ffc56fca19ad2f1598a5d4a9cc136543851a19890ed0d044a3f948886ee857e