Commit Graph

86928 Commits

Author SHA1 Message Date
Larry Hastings af17a2bfba Added tag v3.4.6rc1 for changeset e199a272ccda 2017-01-01 22:13:29 -08:00
Larry Hastings d12551fe71 Version bump for 3.4.6rc1. 2017-01-01 22:12:36 -08:00
Larry Hastings 8f24f665d7 Regenerated pydoc topics for 3.4.6rc1. (Also fixed doc error, improved build.) 2017-01-01 22:09:46 -08:00
Larry Hastings 03fdeb786c Fix test failure so it's no longer dependent on example.com. 2017-01-01 21:49:09 -08:00
Benjamin Peterson b6e2142b0c merge 3.3 2017-01-01 22:07:37 -06:00
Benjamin Peterson e527dd34bc ring in 2017 for Python 2017-01-01 22:04:13 -06:00
Donald Stufft dd5c73b4f2 Upgrade pip to 9.0.1 and setuptools to 28.8.0 2016-11-15 21:17:43 -05:00
Serhiy Storchaka 5ca92ab3d2 Issue #28563: Make plural form selection more lenient and accepting
non-integer numbers.  Django tests depend on this.
2016-11-14 19:25:56 +02:00
Serhiy Storchaka 60ac989d6f Issue #28563: Make plural form selection more lenient and accepting
non-integer numbers.  Django tests depend on this.
2016-11-14 19:22:12 +02:00
Serhiy Storchaka 84293aff9f Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
when decode astral characters.
2016-11-12 14:29:48 +02:00
Serhiy Storchaka b626643734 Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
when decode astral characters.
2016-11-12 14:28:06 +02:00
Serhiy Storchaka 1c3fdd900d Issue #28563: Fixed possible DoS and arbitrary code execution when handle
plural form selections in the gettext module.  The expression parser now
supports exact syntax supported by GNU gettext.
2016-11-08 21:20:09 +02:00
Serhiy Storchaka 07bcf05fcf Issue #28563: Fixed possible DoS and arbitrary code execution when handle
plural form selections in the gettext module.  The expression parser now
supports exact syntax supported by GNU gettext.
2016-11-08 21:17:46 +02:00
Donald Stufft 20a587bd67 Upgrade pip to 9.0 and setuptools to 28.7.1 2016-11-02 15:42:49 -04:00
Serhiy Storchaka 77eede35fc Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug build. 2016-10-25 10:07:51 +03:00
Zachary Ware 068534ab03 Issue #28248: Update Windows build to use OpenSSL 1.0.2j 2016-10-10 21:57:20 -05:00
Yury Selivanov cb9424f643 Issue #27759: Fix selectors incorrectly retain invalid file descriptors.
(Backported to 3.4 as this bug might be exploited to for DoS)
2016-10-06 14:03:03 -04:00
Benjamin Peterson 26d998cfdd properly handle the single null-byte file (closes #24022) 2016-09-18 23:41:11 -07:00
Berker Peksag 354c2f90a1 Issue #26171: Null merge 2016-09-14 08:38:36 +03:00
Berker Peksag d751040b1a Issue #26171: Prevent buffer overflow in get_data
Backport of 01ddd608b85c.
2016-09-14 08:37:28 +03:00
Donald Stufft 16d7d5941d Upgrade setuptools to 27.1.2 2016-09-09 12:08:53 -04:00
Donald Stufft d25d9dc1fc Upgrade setuptools to 27.1.1 2016-09-09 11:35:02 -04:00
Jason R. Coombs 1f5fd648b1 Issue #27960: Revert state to 675e20c38fdac6, backing out all changes by developed for Issue #12885. 2016-09-05 22:24:01 -04:00
Jason R. Coombs 79ae9671ff Issue #12885: Revert commits in 3.4 branch which is security-only fixes. 2016-09-01 23:27:45 -04:00
Jason R. Coombs 6f5d3fd4d1 Issue #12885: Correct issue reference in NEWS 2016-09-01 22:08:25 -04:00
Jason R. Coombs 8ac147d6ee Backed out changeset cc86e9e102e8 2016-09-01 21:55:22 -04:00
Jason R. Coombs 97eda155f8 Issue #12285: Update NEWS 2016-09-01 21:12:17 -04:00
Benjamin Peterson 1f0e7c9933 rearrange methodcaller_new so that the main error case does not cause uninitialized memory usage (closes #27783) 2016-08-16 23:35:35 -07:00
Benjamin Peterson 3a27b0857e do not decref value borrowed from list (closes #27774) 2016-08-15 22:01:41 -07:00
Benjamin Peterson 4f976513ef fix possible integer overflow in binascii.b2a_qp (closes #27760)
Reported by Thomas E. Hybel
2016-08-13 18:33:33 -07:00
Benjamin Peterson 6e01d90cc8 check for overflow in join_append_data (closes #27758)
Reported by Thomas E. Hybel
2016-08-13 17:17:06 -07:00
Vinay Sajip 6f25003291 Issue #20160: Handled passing of large structs to callbacks correctly. 2016-08-05 21:24:27 +01:00
Donald Stufft fb7929044a Switch upload.pypi.io to upload.pypi.org 2016-08-03 18:43:38 -04:00
Senthil Kumaran 4cbb23f8f2 Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.
2016-07-30 23:24:16 -07:00
Martin Panter d27a7c1f22 Issue #27369: Merge test_pyexpat from 3.2 into 3.3 2016-07-14 01:42:53 +00:00
Martin Panter 076ca6c3c8 Issue #27369: Don’t test error message detail that changed in Expat 2.2.0 2016-07-14 01:31:46 +00:00
Martin Panter 2cdcaf1353 Issue #22758: Move NEWS entry to Library section 2016-07-14 01:17:03 +00:00
R David Murray e3638944a9 #22758 null merge 2016-07-10 14:10:08 -04:00
R David Murray 5f21f43af7 #22758: fix regression in handling of secure cookies.
This backports the fix from #16611, per discussion with the release
manager.
2016-07-10 13:32:43 -04:00
Donald Stufft 188c118ba5 Switch to the new upload url for PyPI 2016-07-06 15:27:35 -04:00
Martin Panter 035583b389 Issue #25940: On Windows, connecting to port 444 returns ETIMEDOUT 2016-01-15 01:16:41 +00:00
Martin Panter 3d81d93f34 Issue #25940: Use self-signed.pythontest.net in SSL tests
This is instead of svn.python.org, whose certificate recently expired, and
whose new certificate uses a different root certificate.

The certificate used at the pythontest server was modifed to set the "basic
constraints" CA flag. This flag seems to be required for test_get_ca_certs_
capath() to work (in Python 3.4+).

Added the new self-signed certificate to capath with the following commands:

cp Lib/test/{selfsigned_pythontestdotnet.pem,capath/}
c_rehash -v Lib/test/capath/
c_rehash -v -old Lib/test/capath/
# Note the generated file names
cp Lib/test/capath/{selfsigned_pythontestdotnet.pem,0e4015b9.0}
mv Lib/test/capath/{selfsigned_pythontestdotnet.pem,ce7b8643.0}

The new server responds with "No route to host" when connecting to port 444.
2016-01-14 09:36:00 +00:00
Serhiy Storchaka 31b9410654 Issue #25709: Fixed problem with in-place string concatenation and utf-8 cache. 2015-12-03 01:02:03 +02:00
Martin Panter fab75d9bb9 Issue #25940: Merge ETIMEDOUT fix from 3.2 into 3.3 2016-01-15 02:08:13 +00:00
Martin Panter 73f55076f6 Issue #25940: Merge self-signed.pythontest.net testing from 3.2 into 3.3 2016-01-14 12:21:02 +00:00
Benjamin Peterson 0e617e22f0 remove some copyright notices supserseded by the toplevel ones 2016-01-01 11:53:47 -06:00
Benjamin Peterson f1dcdd9ac5 add 2015 and 2016 2016-01-01 11:53:14 -06:00
Benjamin Peterson 16b347b3de reflow 2016-01-01 11:12:44 -06:00
Benjamin Peterson 75e3630c60 2016 will be another year of writing copyrighted code 2016-01-01 10:23:45 -06:00
Benjamin Peterson 14b2c82855 fix reordering 2015-12-05 00:27:11 -08:00