Commit Graph

13877 Commits

Author SHA1 Message Date
Antoine Pitrou 7d0b8f95e7 Lax cookie parsing in http.cookies could be a security issue when combined
with non-standard cookie handling in some Web browsers.

Reported by Sergey Bobrov.
2014-09-17 00:23:55 +02:00
Ned Deily 217f4cd7ee Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435.  Patch by Zach Byrne.
2014-07-12 22:12:39 -07:00
Ned Deily 915a30fb0d Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435.  Patch by Zach Byrne.
2014-07-12 22:06:26 -07:00
Benjamin Peterson 6cd1954c5c merge 3.2 (#21766) 2014-06-14 18:40:10 -07:00
Benjamin Peterson 73b8b1cdb8 url unquote the path before checking if it refers to a CGI script (closes #21766) 2014-06-14 18:36:29 -07:00
doko@ubuntu.com 8577e5ae09 - Issue #17752: Fix distutils tests when run from the installed location. 2014-05-07 04:44:42 +02:00
Benjamin Peterson 156285c35f merge 3.2 2014-04-13 22:28:16 -04:00
Benjamin Peterson 99b5afab74 in scan_once, prevent the reading of arbitrary memory when passed a negative index
Bug reported by Guido Vranken.
2014-04-13 22:10:38 -04:00
Benjamin Peterson 4717e2112b merge 3.2 (#21082) 2014-04-01 19:17:57 -04:00
Benjamin Peterson ee5f1c13d1 remove directory mode check from makedirs (closes #21082) 2014-04-01 19:13:18 -04:00
Benjamin Peterson aa2d085d29 merge 3.2 2014-03-30 20:34:05 -04:00
Benjamin Peterson 8aef28a5d0 add Ian Beer 2014-03-30 20:33:47 -04:00
Richard Oudkerk 3e952d56ea Issue #20633: Replace relative import by absolute import. 2014-03-23 12:42:28 +00:00
Benjamin Peterson fda33559dc fix ctypes test alignment assumptions (closes #20946)
Patch by Andreas Schwab.
2014-03-16 10:07:26 +01:00
Ned Deily b454742c64 Issue #20939: Fix test_geturl failure in test_urllibnet due to
new redirect of http://www.python.org/ to https://www.python.org.
2014-03-15 13:15:31 -07:00
Éric Araujo 45fc8713bd Make distutils error messages more helpful (#11599).
When running external programs such as a C compiler and getting an
error code, distutils only prints the program name.  With this change,
one can get the full command line by setting the DISTUTILS_DEBUG
environment variable.

This should have no compatibility issues, unless there are tools
that depend on the exact format of distutils debug messages.
2014-03-13 04:55:35 -04:00
Benjamin Peterson f993399c40 add Sean Rodman 2014-03-12 15:08:43 -05:00
Éric Araujo fc773a2d4b Avoid “error: None” messages from distutils (#4931).
Thanks to Amaury Forgeot d’Arc and Philip J. Eby.
2014-03-12 03:34:02 -04:00
Ned Deily 6120739f0c Issue #20875: Prevent possible gzip "'read' is not defined" NameError.
Patch by Claudiu Popa.
2014-03-09 14:44:34 -07:00
Georg Brandl 5e572fd490 merge with 3.3.5 release repo 2014-03-09 11:17:23 +01:00
Georg Brandl 92d2d346ef Post-release update. 2014-03-09 11:01:14 +01:00
Georg Brandl fbd7518a41 Bump to 3.3.5 final. 2014-03-09 09:37:14 +01:00
Serhiy Storchaka ccdf352370 Issue #20283: RE pattern methods now accept the string keyword parameters
as documented.  The pattern and source keyword parameters are left as
deprecated aliases.
2014-03-06 11:28:32 +02:00
Georg Brandl c186b23799 Bump to 3.3.5rc2. 2014-03-02 09:19:03 +01:00
Georg Brandl bb386cf810 Update NEWS for 3.3.5rc2. 2014-03-02 09:18:41 +01:00
Georg Brandl 2658bad090 merge 3.3.5rc1 release commits with 3.3 branch 2014-03-02 08:54:15 +01:00
Benjamin Peterson 9e90b12bb2 add Chris Angelico 2014-03-01 19:16:12 -05:00
Brett Cannon 298bb96776 Issue #20778: Fix modulefinder to work with bytecode-only modules.
Bug filed and initial attempt at a patch by Bohuslav Kabrda.
2014-02-28 10:44:45 -05:00
Martin v. Löwis 815b41b1cd Issue #20731: Properly position in source code files even if they
are opened in text mode. Patch by Serhiy Storchaka.
2014-02-28 15:27:29 +01:00
Antoine Pitrou b807577da2 Issue #20791: copy.copy() now doesn't make a copy when the input is a bytes object. Initial patch by Peter Otten. 2014-02-27 22:14:31 +01:00
Gregory P. Smith 7b80716cff Mention issue 20621 fix in the NEWS file for 3.3.5rc1.
This bug was of the major reasons for the release.
2014-02-25 16:45:55 -08:00
Serhiy Storchaka 94ee389308 Issue #19619: Blacklist non-text codecs in method API
str.encode, bytes.decode and bytearray.decode now use an
internal API to throw LookupError for known non-text encodings,
rather than attempting the encoding or decoding operation and
then throwing a TypeError for an unexpected output type.

The latter mechanism remains in place for third party non-text
encodings.

Backported changeset d68df99d7a57.
2014-02-24 14:43:03 +02:00
Serhiy Storchaka 20f8728bf0 Issue #20535: PYTHONWARNING no longer affects the run_tests.py script.
Patch by Arfrever Frehtes Taifersar Arahesis.
2014-02-24 13:57:00 +02:00
Antoine Pitrou 220cc21cec Issue #20743: Fix a reference leak in test_tcl. 2014-02-23 19:39:06 +01:00
Georg Brandl e12675a0f2 Bump to 3.3.5rc1. 2014-02-23 08:30:06 +01:00
Zachary Ware 2d659518aa Issue #20221: Removed conflicting (or circular) hypot definition
when compiled with VS 2010 or above.  Initial patch by Tabrez Mohammed.
2014-02-20 15:36:34 -06:00
Serhiy Storchaka e95977621d Fixed grid_columnconfigure() and grid_rowconfigure() methods of
Tkinter widgets to work in wantobjects=True mode.
2014-02-19 18:34:05 +02:00
Victor Stinner d5c8ce7cc0 Issue #19612: On Windows, subprocess.Popen.communicate() now ignores
OSError(22, 'Invalid argument') when writing input data into stdin, whereas
the process already exited.
2014-02-18 22:00:53 +01:00
Zachary Ware 9e5a9876ad Issue #20609: Fix building 64-bit binaries on 32-bit Windows. 2014-02-18 11:33:18 -06:00
Zachary Ware cefe6b34de Issue #20510: Rewrote test_exit in test_sys to match existing comments
and to modernize.  Patch by Gareth Rees.
2014-02-18 08:39:04 -06:00
Terry Jan Reedy 5b8d2c3af7 Issue #8478: Untokenizer.compat now processes first token from iterator input.
Patch based on lines from Georg Brandl, Eric Snow, and Gareth Rees.
2014-02-17 23:12:16 -05:00
Ned Deily b24f481ab4 Issue #20605: Make test_socket getaddrinfo OS X segfault test more robust. 2014-02-13 22:50:42 -08:00
Serhiy Storchaka dbb101909d Issue #6815: os.path.expandvars() now supports non-ASCII environment
variables names and values.
2014-02-13 10:13:53 +02:00
Serhiy Storchaka 61e2493b83 Issue #17671: Fixed a crash when use non-initialized io.BufferedRWPair.
Based on patch by Stephen Tu.
2014-02-12 10:52:35 +02:00
Benjamin Peterson 932bba33f2 avoid name clash with posix_close (closes #20594) 2014-02-11 10:16:16 -05:00
Serhiy Storchaka 3a308b9f37 Issue #19856: shutil.move() failed to move a directory to other directory
on Windows if source name ends with os.altsep.
2014-02-11 10:30:59 +02:00
Benjamin Peterson c2f665e721 don't put runtime values in array initializer for C89 compliance (closes #20588) 2014-02-10 22:19:02 -05:00
Georg Brandl 8f9c20b8ff merge with 3.3.4 releasing repo 2014-02-10 22:04:20 +01:00
Georg Brandl a37fcb28e6 Post-release updates. 2014-02-10 21:56:33 +01:00
Serhiy Storchaka 505ff755d7 Issue #20437: Fixed 21 potential bugs when deleting objects references. 2014-02-09 13:33:53 +02:00