Skip to content

[3.13] gh-156939: Fix xmlcharrefreplace() buffer overflow (GH-157109) #208834

[3.13] gh-156939: Fix xmlcharrefreplace() buffer overflow (GH-157109)

[3.13] gh-156939: Fix xmlcharrefreplace() buffer overflow (GH-157109) #208834

Triggered via pull request September 9, 2026 19:18
Status Failure
Total duration 3m 37s
Artifacts

build.yml

on: pull_request
Change detection  /  Create context from changed files
14s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: cifuzz
Waiting for pending jobs
Check if Autoconf files are up to date
35s
Check if Autoconf files are up to date
Check if generated files are up to date
1m 20s
Check if generated files are up to date
C API Docs  /  Check if all C APIs are documented
12s
C API Docs / Check if all C APIs are documented
Ubuntu (installed)  /  build, install and test
1m 53s
Ubuntu (installed) / build, install and test
WASI  /  build and test
44s
WASI / build and test
Hypothesis tests on Ubuntu
58s
Hypothesis tests on Ubuntu
Docs  /  Check EPUB
Docs / Check EPUB
Docs  /  Docs
Docs / Docs
Docs  /  Doctest
Docs / Doctest
Check if the ABI has changed
1m 1s
Check if the ABI has changed
Matrix: build-android
All required checks pass
3s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

64 errors and 16 warnings
WASI / build and test
Process completed with exit code 1.
Windows (free-threading) / build (arm64)
Process completed with exit code 1.
Windows (free-threading) / build (arm64): Objects/unicodeobject.c#L943
cannot allocate an array of constant size 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / build (arm64): Objects/unicodeobject.c#L943
expected constant expression [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / build (arm64): Objects/unicodeobject.c#L943
'_Py_MAX_UNICODE': undeclared identifier [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Android (x86_64)
Process completed with exit code 1.
Windows / build (arm64)
Process completed with exit code 1.
Windows / build (arm64): Objects/unicodeobject.c#L943
cannot allocate an array of constant size 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / build (arm64): Objects/unicodeobject.c#L943
expected constant expression [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / build (arm64): Objects/unicodeobject.c#L943
'_Py_MAX_UNICODE': undeclared identifier [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.5.8)
Process completed with exit code 2.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.5.8): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.5.8): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.22)
Process completed with exit code 2.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.22): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.22): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Hypothesis tests on Ubuntu
Process completed with exit code 2.
Hypothesis tests on Ubuntu: Include/pymacro.h#L83
expression in static assertion is not an integer
Hypothesis tests on Ubuntu: Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 1.1.1w)
Process completed with exit code 2.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 1.1.1w): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 1.1.1w): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Check if the ABI has changed
Process completed with exit code 2.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.4.7)
Process completed with exit code 2.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.4.7): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.4.7): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Windows (free-threading) / build and test (x64)
Process completed with exit code 1.
Windows (free-threading) / build and test (x64): Objects/unicodeobject.c#L943
cannot allocate an array of constant size 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / build and test (x64): Objects/unicodeobject.c#L943
expected constant expression [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows (free-threading) / build and test (x64): Objects/unicodeobject.c#L943
'_Py_MAX_UNICODE': undeclared identifier [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.6.4)
Process completed with exit code 2.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.6.4): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.6.4): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Windows / build and test (x64)
Process completed with exit code 1.
Windows / build and test (x64): Objects/unicodeobject.c#L943
cannot allocate an array of constant size 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / build and test (x64): Objects/unicodeobject.c#L943
expected constant expression [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / build and test (x64): Objects/unicodeobject.c#L943
'_Py_MAX_UNICODE': undeclared identifier [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / build and test (Win32)
Process completed with exit code 1.
Check if generated files are up to date
Process completed with exit code 2.
Ubuntu / build and test (ubuntu-24.04)
Process completed with exit code 2.
Ubuntu / build and test (ubuntu-24.04): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu / build and test (ubuntu-24.04): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Ubuntu (free-threading) / build and test (ubuntu-24.04-arm)
Process completed with exit code 2.
Ubuntu (free-threading) / build and test (ubuntu-24.04-arm): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu (free-threading) / build and test (ubuntu-24.04-arm): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Address sanitizer (ubuntu-24.04)
Process completed with exit code 2.
Address sanitizer (ubuntu-24.04): Include/pymacro.h#L83
expression in static assertion is not an integer
Address sanitizer (ubuntu-24.04): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
macOS / build and test (macos-26)
Process completed with exit code 2.
Android (aarch64)
Process completed with exit code 1.
Ubuntu / build and test (ubuntu-24.04-arm)
Process completed with exit code 2.
Ubuntu / build and test (ubuntu-24.04-arm): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu / build and test (ubuntu-24.04-arm): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Ubuntu (free-threading) / build and test (ubuntu-24.04)
Process completed with exit code 2.
Ubuntu (free-threading) / build and test (ubuntu-24.04): Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu (free-threading) / build and test (ubuntu-24.04): Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
macOS (free-threading) / build and test (macos-26)
Process completed with exit code 2.
Sanitizers / TSan
Process completed with exit code 2.
Ubuntu (installed) / build, install and test
Process completed with exit code 2.
Ubuntu (installed) / build, install and test: Include/pymacro.h#L83
expression in static assertion is not an integer
Ubuntu (installed) / build, install and test: Objects/unicodeobject.c#L943
‘_Py_MAX_UNICODE’ undeclared (first use in this function); did you mean ‘MAX_UNICODE’?
Sanitizers / TSan (free-threading)
Process completed with exit code 2.
macOS / build and test (macos-26-intel)
Process completed with exit code 2.
All required checks pass
Process completed with exit code 1.
Windows (free-threading) / build (arm64): Objects/unicodeobject.c#L943
sizeof returns 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / build (arm64): Objects/unicodeobject.c#L943
sizeof returns 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
Check if the ABI has changed
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
Windows (free-threading) / build and test (x64): Objects/unicodeobject.c#L943
sizeof returns 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Windows / build and test (x64): Objects/unicodeobject.c#L943
sizeof returns 0 [D:\a\cpython\cpython\PCbuild\_freeze_module.vcxproj]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]