| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:700b64a3-caed-401a-fb6d-30a193ab7094 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | D566:F547B:5042F4:6EE063:6AECCF6B |
| html-safe-nonce | 9ed5628395fa14afdf1d396ee122424091eb4a6c685fa202aa9187c7e6cb690b |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJENTY2OkY1NDdCOjUwNDJGNDo2RUUwNjM6NkFFQ0NGNkIiLCJ2aXNpdG9yX2lkIjoiMzQ0MzI3NDk5NTIzNDI5NTY1OSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | eab99b239fe92fe06af4e6ac907c6f001ef48811e1dc3e7aef35a1731ac943b9 |
| hovercard-subject-tag | pull_request:4638070041 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/python/cpython/158163/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/e10fd43c5e618d5c3d014cee98e025bdb6f4724bf1709bd7de0ac83a1bfd05e0/python/cpython/pull/158163 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/e10fd43c5e618d5c3d014cee98e025bdb6f4724bf1709bd7de0ac83a1bfd05e0/python/cpython/pull/158163 |
| og:image:alt | (cherry picked from commit c043873)
Co-authored-by: Stan Ulbrych stan@python.org
Issue: Heap-buffer-overflow in the hz incremental decoder on a trailing ~ #157325 |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | miss-islington |
| hostname | github.com |
| expected-hostname | github.com |
| None | 0d8e13d765457347e0bc9664aa9103874b0a754f8a1ffe4e190178ab258dd8cc |
| turbo-cache-control | no-cache |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | e2ab5c9355284de552dd38ea36155a4fa132df68 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| react-app-name | pull-requests |
| Skip to content | https://github.com/python/cpython/pull/158163#start-of-content |
| https://github.com/ |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F158163 |
| GitHubRepository hosting, code review, and collaboration | https://github.com/platform |
| CopilotAI coding agent for tasks, projects, and automated work | https://github.com/features/copilot |
| ActionsCI/CD and automation | https://github.com/features/actions |
| Code QualityQuality analysis, fixes, and enforcement | https://github.com/features/code-quality |
| CodespacesCloud development environments | https://github.com/features/codespaces |
| Code SecurityVulnerability detection and remediation | https://github.com/security/advanced-security/code-security |
| Secret ProtectionSecret scanning and leak prevention | https://github.com/security/advanced-security/secret-protection |
| All Features | https://github.com/features |
| Documentation | https://docs.github.com/en |
| Training | https://learn.github.com/skills |
| Certifications | https://learn.github.com/credentials |
| Build with Copilot | https://github.com/features/ai |
| Customize Copilot | https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview |
| Integrations | https://github.com/marketplace |
| Trending repos | https://github.com/trending |
| GitHub Sponsors | https://github.com/open-source/sponsors |
| Developer articles | https://github.com/resources/articles |
| ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place. | https://github.blog/changelog/ |
| Enterprises | https://github.com/enterprise |
| Team | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| See all industries | https://github.com/solutions/industry |
| Why GitHub | https://github.com/why-github |
| Customer Stories | https://github.com/customer-stories |
| Business insights | https://github.com/solutions/executive-insights |
| Trust Center | https://github.com/trust-center |
| GitHub Advanced SecurityEnterprise-grade code security | https://github.com/security/advanced-security |
| Copilot for businessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Documentation | https://docs.github.com/en |
| Resource center | https://github.com/resources |
| Blog | https://github.blog/ |
| Events & webinars | https://github.com/resources/events |
| Community Forum | https://github.com/orgs/community/discussions |
| Customer Stories | https://github.com/customer-stories |
| Integrations | https://github.com/marketplace |
| Customer support | https://help.github.com/ |
| Training | https://learn.github.com/skills |
| GitHub Status | https://www.githubstatus.com/ |
| About | https://github.com/about |
| Partners | https://github.com/partners |
| Changelog | https://github.blog/changelog/ |
| GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub. | https://githubuniverse.com/ |
| Pricing | https://github.com/pricing |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F158163 |
| Sign up | https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=python%2Fcpython |
| Reload | https://github.com/python/cpython/pull/158163 |
| Reload | https://github.com/python/cpython/pull/158163 |
| Reload | https://github.com/python/cpython/pull/158163 |
| python | https://github.com/python |
| cpython | https://github.com/python/cpython |
| Code | https://github.com/python/cpython |
| Issues5k+ (5k+) | https://github.com/python/cpython/issues |
| Pull requests2.3k (2.3k) | https://github.com/python/cpython/pulls |
| Actions | https://github.com/python/cpython/actions |
| Projects | https://github.com/python/cpython/projects |
| Security and quality | https://github.com/python/cpython/security |
| Insights | https://github.com/python/cpython/pulse |
| https://github.com/python/cpython |
| serhiy-storchaka | https://github.com/serhiy-storchaka |
| python:3.15 | https://github.com/python/cpython/tree/3.15 |
| miss-islington:backport-c043873-3.15 | https://github.com/miss-islington/cpython/tree/backport-c043873-3.15 |
| Conversation | https://github.com/python/cpython/pull/158163 |
| Commits1 (1) | https://github.com/python/cpython/pull/158163/commits |
| Checks | https://github.com/python/cpython/pull/158163/checks |
| Files changed | https://github.com/python/cpython/pull/158163/files |
| [3.15] gh-157325: Fix an OOB read in the hz incremental decoder on a trailing ~ (gh-157333) | https://github.com/python/cpython/pull/158163#top |
| serhiy-storchaka | https://github.com/serhiy-storchaka |
| python:3.15 | https://github.com/python/cpython/tree/3.15 |
| miss-islington:backport-c043873-3.15 | https://github.com/miss-islington/cpython/tree/backport-c043873-3.15 |
|
| https://github.com/miss-islington |
| miss-islington | https://github.com/miss-islington |
| Sep 25, 2026 | https://github.com/python/cpython/pull/158163#issue-5582924626 |
| Please reload this page | https://github.com/python/cpython/pull/158163 |
| c043873 | https://github.com/python/cpython/commit/c04387348eb8223977e46f4972c08833c11c6617 |
| Heap-buffer-overflow in the hz incremental decoder on a trailing ~ #157325 | https://github.com/python/cpython/issues/157325 |
| Please reload this page | https://github.com/python/cpython/pull/158163 |
|
| https://github.com/StanFromIreland |
|
| https://github.com/miss-islington |
| pythongh-157325 | https://github.com/python/cpython/issues/157325 |
| : Fix an OOB read in the | https://github.com/python/cpython/pull/158163/commits/81a05cc5621624ede00abbab0fbbf8f86e6c6f50 |
| hz | https://github.com/python/cpython/pull/158163/commits/81a05cc5621624ede00abbab0fbbf8f86e6c6f50 |
| incremental decoder on a… | https://github.com/python/cpython/pull/158163/commits/81a05cc5621624ede00abbab0fbbf8f86e6c6f50 |
| 81a05cc | https://github.com/python/cpython/pull/158163/commits/81a05cc5621624ede00abbab0fbbf8f86e6c6f50 |
| pythongh-157333 | https://github.com/python/cpython/pull/157333 |
| c043873 | https://github.com/miss-islington/cpython/commit/c04387348eb8223977e46f4972c08833c11c6617 |
| https://github.com/miss-islington |
| miss-islington | https://github.com/miss-islington |
| corona10 | https://github.com/corona10 |
| code owner | https://github.com/python/cpython/blob/13b1659d6e8cb39436bf6b772725f61f33e6ec47/.github/CODEOWNERS#L400 |
| September 25, 2026 12:41 | https://github.com/python/cpython/pull/158163#event-31835536314 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
Sep 25, 2026
| https://github.com/python/cpython/pull/158163#ref-issue-5425825178 |
|
Heap-buffer-overflow in the hz incremental decoder on a trailing ~
#157325
| https://github.com/python/cpython/issues/157325 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting review
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20review%22 |
| Sep 25, 2026 | https://github.com/python/cpython/pull/158163#event-31835543968 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
Sep 25, 2026
| https://github.com/python/cpython/pull/158163#ref-pullrequest-5426306889 |
|
gh-157325: Fix an OOB read in the hz incremental decoder on a trailing ~
#157333
| https://github.com/python/cpython/pull/157333 |
| https://github.com/serhiy-storchaka |
| serhiy-storchaka | https://github.com/serhiy-storchaka |
| 5f437c5 | https://github.com/python/cpython/commit/5f437c5ff8e004620a5e116bdbee0d294feff9f9 |
| Oct 10, 2026 | https://github.com/python/cpython/pull/158163#event-32937075544 |
| Please reload this page | https://github.com/python/cpython/pull/158163 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting review
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20review%22 |
| Oct 10, 2026 | https://github.com/python/cpython/pull/158163#event-32937077534 |
| https://github.com/miss-islington |
| miss-islington | https://github.com/miss-islington |
| October 10, 2026 10:35 | https://github.com/python/cpython/pull/158163#event-32937077788 |
| https://github.co/hiddenchars |
| https://github.com/python/cpython/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F158163 |
|
| https://github.com/corona10 |
|
corona10
| https://github.com/corona10 |
| Please reload this page | https://github.com/python/cpython/pull/158163 |
| Please reload this page | https://github.com/python/cpython/pull/158163 |
|
| https://github.com/miss-islington |
|
| https://github.com/serhiy-storchaka |
|
| https://github.com/StanFromIreland |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |