From e120a7b59c786dc2f58c9d1a76f0523f8d252cc0 Mon Sep 17 00:00:00 2001
From: Erik Montnemery <erik@montnemery.com>
Date: Tue, 28 Jan 2025 13:48:42 +0100
Subject: [PATCH] Fix deadlock in WS command backup/can_decrypt_on_download
 (#136707)

---
 homeassistant/components/backup/manager.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/homeassistant/components/backup/manager.py b/homeassistant/components/backup/manager.py
index f4ea27ca5f1..99740428863 100644
--- a/homeassistant/components/backup/manager.py
+++ b/homeassistant/components/backup/manager.py
@@ -1055,7 +1055,9 @@ class BackupManager:
             backup_stream = await agent.async_download_backup(backup_id)
             reader = cast(IO[bytes], AsyncIteratorReader(self.hass, backup_stream))
         try:
-            validate_password_stream(reader, password)
+            await self.hass.async_add_executor_job(
+                validate_password_stream, reader, password
+            )
         except backup_util.IncorrectPassword as err:
             raise IncorrectPasswordError from err
         except backup_util.UnsupportedSecureTarVersion as err: