[issue44829] zoneinfo.ZoneInfo does not check for Windows device names

Change by Eryk Sun : -- Removed message: https://bugs.python.org/msg398916 ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue44829] zoneinfo.ZoneInfo does not check for Windows device names

Paul Ganssle added the comment: Sorry you didn't receive a response to your security@ email, I guess my response just went to the PSRT, not to you as well. I believe we determined that this was an issue in importlib.resources generally, not specific to zoneinfo. I think `importlib.resources

[issue44829] zoneinfo.ZoneInfo does not check for Windows device names

Eryk Sun added the comment: In zoneinfo._tzpath, _validate_tzfile_path() depends on os.path.normpath(). I think the Windows implementation of normpath() in the ntpath module should be extended to normalize reserved names in the final path component in the same manner as WinAPI GetFullPathNam

[issue44829] zoneinfo.ZoneInfo does not check for Windows device names

Change by Karthikeyan Singaravelan : -- nosy: +belopolsky, p-ganssle ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubs

[issue44829] zoneinfo.ZoneInfo does not check for Windows device names

New submission from apple502j : Note: this issue was submitted to security@ due to its potential as a DoS vector on 2021-05-08, but I have not received a response (excluding the automated email). It is over 88 days since the report, so I am now reporting this publicly. Issue: zoneinfo.ZoneIn