PyPI - codechecker - Versions diffs - 6.28.2__tar.gz → 6.28.3__tar.gz - Mend

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codechecker
-Version: 6.28.2
+Version: 6.28.3
 Summary: CodeChecker is an analyzer tooling, defect database and viewer extension
 Home-page: https://github.com/Ericsson/CodeChecker
 Author: CodeChecker Team (Ericsson)
@@ -24,24 +24,24 @@ Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE.TXT
 Requires-Dist: sqlalchemy~=2.0
-Requires-Dist: PyYAML~=6.0
 Requires-Dist: portalocker~=3.0
-Requires-Dist: lxml~=6.0
-Requires-Dist: Authlib~=1.6
+Requires-Dist: PyYAML~=6.0
+Requires-Dist: argcomplete~=3.0
 Requires-Dist: setuptools~=80.0
-Requires-Dist: thrift~=0.22
 Requires-Dist: sarif-tools~=3.0
-Requires-Dist: semver~=3.0
-Requires-Dist: gitpython~=3.0
-Requires-Dist: multiprocess~=0.70
-Requires-Dist: argcomplete~=3.0
-Requires-Dist: alembic~=1.5
+Requires-Dist: lxml~=6.0
+Requires-Dist: thrift~=0.22
 Requires-Dist: lxml-stubs~=0.5.0
-Requires-Dist: types-psutil~=7.0
 Requires-Dist: requests~=2.0
+Requires-Dist: multiprocess~=0.70
+Requires-Dist: Authlib~=1.6
+Requires-Dist: types-psutil~=7.0
+Requires-Dist: semver~=3.0
+Requires-Dist: types-setuptools~=80.0
 Requires-Dist: psutil~=7.0
+Requires-Dist: gitpython~=3.0
+Requires-Dist: alembic~=1.5
 Requires-Dist: types-PyYAML~=6.0
-Requires-Dist: types-setuptools~=80.0
 Dynamic: author
 Dynamic: author-email
 Dynamic: classifier

@@ -98,7 +98,7 @@ static void getDefaultArguments(const char* prog_, LoggerVector* args_)
   while ((readSize = getline(&line, &lineSize, cmdOut)) >= 0)
   {
-    char fullPath[PATH_MAX] = "-I";
+    char fullPath[PATH_MAX + 2] = "-I";
     char* pathEnd;
     char* pathStart;

@@ -0,0 +1,14 @@
+{
+    "git_describe": {
+        "dirty": "6.28.3",
+        "tag": "6.28.3"
+    },
+    "git_hash": "cc251975c3dcd74f738ce3b80ae6e72b444e67a6",
+    "package_build_date": "2026-08-25T15:45",
+    "version": {
+        "major": "6",
+        "minor": "28",
+        "rc": "",
+        "revision": "3"
+    }
+}

@@ -0,0 +1,14 @@
+{
+    "git_describe": {
+        "dirty": "6.28.3",
+        "tag": "6.28.3"
+    },
+    "git_hash": "cc251975c3dcd74f738ce3b80ae6e72b444e67a6",
+    "package_build_date": "2026-08-25T15:45",
+    "version": {
+        "major": "6",
+        "minor": "28",
+        "rc": "",
+        "revision": "3"
+    }
+}

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codechecker
-Version: 6.28.2
+Version: 6.28.3
 Summary: CodeChecker is an analyzer tooling, defect database and viewer extension
 Home-page: https://github.com/Ericsson/CodeChecker
 Author: CodeChecker Team (Ericsson)
@@ -24,24 +24,24 @@ Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE.TXT
 Requires-Dist: sqlalchemy~=2.0
-Requires-Dist: PyYAML~=6.0
 Requires-Dist: portalocker~=3.0
-Requires-Dist: lxml~=6.0
-Requires-Dist: Authlib~=1.6
+Requires-Dist: PyYAML~=6.0
+Requires-Dist: argcomplete~=3.0
 Requires-Dist: setuptools~=80.0
-Requires-Dist: thrift~=0.22
 Requires-Dist: sarif-tools~=3.0
-Requires-Dist: semver~=3.0
-Requires-Dist: gitpython~=3.0
-Requires-Dist: multiprocess~=0.70
-Requires-Dist: argcomplete~=3.0
-Requires-Dist: alembic~=1.5
+Requires-Dist: lxml~=6.0
+Requires-Dist: thrift~=0.22
 Requires-Dist: lxml-stubs~=0.5.0
-Requires-Dist: types-psutil~=7.0
 Requires-Dist: requests~=2.0
+Requires-Dist: multiprocess~=0.70
+Requires-Dist: Authlib~=1.6
+Requires-Dist: types-psutil~=7.0
+Requires-Dist: semver~=3.0
+Requires-Dist: types-setuptools~=80.0
 Requires-Dist: psutil~=7.0
+Requires-Dist: gitpython~=3.0
+Requires-Dist: alembic~=1.5
 Requires-Dist: types-PyYAML~=6.0
-Requires-Dist: types-setuptools~=80.0
 Dynamic: author
 Dynamic: author-email
 Dynamic: classifier

@@ -733,8 +733,8 @@ class ThriftAuthHandler:
             # removed.
             user = self.getLoggedInUser()
             num_of_removed = session.query(PersonalAccessTokenDB) \
-                .filter(Session.user_name == user) \
-                .filter(Session.token == token) \
+                .filter(PersonalAccessTokenDB.user_name == user) \
+                .filter(PersonalAccessTokenDB.token == token) \
                 .delete(synchronize_session=False)
             session.commit()

@@ -22,8 +22,8 @@ from pathlib import Path
 import sqlalchemy
 import tempfile
 import time
-from typing import Any, Callable, Dict, List, Optional, Set, Tuple, Union, \
-    cast
+from typing import Any, Callable, Dict, List, NoReturn, \
+    Optional, Set, Tuple, Union, cast
 import zipfile
 import zlib
@@ -234,6 +234,14 @@ def unzip(run_name: str, b64zip: str, output_dir: Path) -> int:
     This ZIP is extracted to a temporary directory and the ZIP is then deleted.
     The function returns the size of the extracted decompressed ZIP file.
     """
+    DECOMPRESSED_ZIP_MAX_SIZE = 1024 * 1024 * 1024 * 16  # 16 GiB
+    def reject_unzip() -> NoReturn:
+        error_message = (f"Rejected storage of run '{run_name}', "
+                         "decompressed ZIP file is too large!")
+        LOG.info(error_message)
+        raise RequestFailed(ErrorCode.IOERROR, error_message)
     if not b64zip:
         return 0
@@ -242,10 +250,15 @@ def unzip(run_name: str, b64zip: str, output_dir: Path) -> int:
         LOG.debug("Decompressing input massStoreRun() ZIP to '%s' ...",
                   zip_file.name)
         start_time = time.time()
-        zip_file.write(zlib.decompress(base64.b64decode(b64zip)))
+        zlib_decomp = zlib.decompressobj()
+        zip_file.write(zlib_decomp.decompress(
+            base64.b64decode(b64zip), max_length=DECOMPRESSED_ZIP_MAX_SIZE))
         zip_file.flush()
         end_time = time.time()
+        if zlib_decomp.unconsumed_tail:
+            reject_unzip()
         size = os.stat(zip_file.name).st_size
         LOG.debug("Decompressed input massStoreRun() ZIP '%s' -> '%s' "
                   "(compression ratio: %.2f%%) in '%s'.",
@@ -258,7 +271,12 @@ def unzip(run_name: str, b64zip: str, output_dir: Path) -> int:
             LOG.debug("Extracting massStoreRun() ZIP '%s' to '%s' ...",
                       zip_file.name, output_dir)
             try:
-                zip_handle.extractall(output_dir)
+                unzipped_size = 0
+                for member in zip_handle.infolist():
+                    unzipped_size += member.file_size
+                    if unzipped_size > DECOMPRESSED_ZIP_MAX_SIZE:
+                        reject_unzip()
+                    zip_handle.extract(member, output_dir)
                 return size
             except Exception:
                 LOG.error("Failed to extract received ZIP.")

@@ -142,7 +142,7 @@ with open(os.path.join("docs", "README.md"), "r",
 setuptools.setup(
     name="codechecker",
-    version="6.28.2",
+    version="6.28.3",
     author='CodeChecker Team (Ericsson)',
     author_email='codechecker-tool@googlegroups.com',
     description="CodeChecker is an analyzer tooling, defect database and "

@@ -1,14 +0,0 @@
-{
-    "git_describe": {
-        "dirty": "6.28.2",
-        "tag": "6.28.2"
-    },
-    "git_hash": "13b2b26718497c13ad9987a5d71d7f2dcb9d270f",
-    "package_build_date": "2026-06-29T08:05",
-    "version": {
-        "major": "6",
-        "minor": "28",
-        "rc": "",
-        "revision": "2"
-    }
-}

codechecker 6.28.2__tar.gz → 6.28.3__tar.gz

codechecker 6.28.2tar.gz → 6.28.3tar.gz