Commit Graph

94939 Commits

Author SHA1 Message Date
Senthil Kumaran 436fe5a447 [merge from 3.3] Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.
2016-07-30 23:34:34 -07:00
Senthil Kumaran 4cbb23f8f2 Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.
2016-07-30 23:24:16 -07:00
Martin Panter 43a94a7e2f Issue #27641: Comment out regeneration rules when cross compiling 2016-07-29 05:52:32 +00:00
Martin Panter 6c7d5a2553 Issue #24278: Explain how argument parsing output buffers are managed 2016-08-03 14:35:05 +00:00
Donald Stufft ef330d35c8 Merge 3.4 2016-08-03 18:49:19 -04:00
Berker Peksag bed6891c77 Issue #23710: Update PyObject_HEAD documentation
Since PEP 3123, PyObject_HEAD only has one field named ob_base.
Users now need to use the Py_TYPE macro instead of self->ob_type.

Initial patch by Ammar Askar.
2016-08-03 12:58:49 +03:00
Stefan Krah 9de620e970 Issue #20767: Fix -R option for FreeBSD/clang. 2016-08-03 11:18:26 +02:00
Berker Peksag 6cafececbf Issue #26576: Clarify that the @deco syntax is not always an equivalent of f = deco(f)
Patch by Chris Angelico.
2016-08-03 10:17:21 +03:00
Stefan Krah e12a68be35 Issue #27241: Catch exception when running pstats as main. 2016-08-02 22:30:24 +02:00
Senthil Kumaran 7bfbd1d3c5 merge heads 2016-07-30 23:48:19 -07:00
Senthil Kumaran 17742f2d45 [merge from 3.4] - Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.
2016-07-30 23:39:06 -07:00
Benjamin Peterson dbaa559b7f all SCHED_ constants are optional (closes #27656) 2016-07-30 23:21:50 -07:00
Xavier de Gaye 3a32bdfaa7 Issue #27453: CPP invocation in configure must use CPPFLAGS.
Patch by Chi Hsuan Yen.
2016-07-30 11:28:35 +02:00
Berker Peksag fa95068081 Silence another "default role used" warning in typing.rst
This should make ware-docs green again.
2016-07-30 03:47:52 +03:00
Guido van Rossum c301cbf445 Fix whitespace. 2016-07-29 15:41:17 -07:00
Guido van Rossum 342e800e97 Expand documentation about type aliases and NewType in the typing module.
By Michael Lee.
2016-07-29 15:38:14 -07:00
Martin Panter 1050d2d0c7 Issue #26462: Doc: reduce literal_block warnings, fix syntax highlighting.
Patch by Julien Palard.
2016-07-26 11:18:21 +02:00
Zachary Ware 87ec85f420 Correct typo in Windows docs.
Found by Jack Copper on docs@
2016-07-28 19:00:53 -05:00
Victor Stinner 4a865a35cd NEWS: tag security related changes with [Security] prefix
Issue #27404.
2016-07-28 17:06:25 +02:00
Martin Panter 3e5b1d3cf5 Issue #23943: Restore extra fixes lost in merge 4fb2075952a4 2016-07-28 03:48:29 +00:00
Martin Panter eb9957065a Issue #27626: Spelling fixes in docs, comments and internal names
Based on patch by Ville Skyttä.
2016-07-28 01:11:04 +00:00
Martin Panter eac67be948 Issue #27490: Do not build pgen when cross-compiling
The dependendency on the $(PGEN) variable must only be
set when not cross-compiling. When cross-compiling,
$(PGEN) will not be used, so no need to build it.

Patch by Thomas Perl.
2016-07-28 01:28:27 +00:00
Victor Stinner e33797b686 ctypes: fix CThunkObject_new()
* Initialize restype and flags fields to fix a crash when Python runs on a
  read-only file system
* Use Py_ssize_t type rather than int for the "i" iterator variable
* Reorder assignements to be able to more easily check if all fields are
  initialized

Issue #11048. Initial patch written by Marcin Bachry.
2016-07-27 16:58:47 +02:00
Berker Peksag 25539b089f Issue #27633: Fix usage of versionchanged directive in email.parser.rst
Patch by Florian Preinstorfer.
2016-07-27 13:32:54 +03:00
Xavier de Gaye fd0d5939bd Issue #26662: Set PYTHON_FOR_GEN in configure
as the Python program to be used for file generation during the build.
2016-07-26 12:48:08 +02:00
Martin Panter 254da19d0e Issue #26638: Don’t link 2to3 -l option to the tarfile -l option 2016-07-26 06:46:06 +00:00
Martin Panter e8db861f47 Issue #27581: Don’t rely on overflow wrapping in PySequence_Tuple()
Patch by Xiang Zhang.
2016-07-25 02:30:05 +00:00
Berker Peksag aa46bd461c Issue #27601: Improve example in the "Hashing of numeric types" section
* Fix return value of hash_compute() implementation
* Rename variable names to hash_value to improve readability

Patch by Emanuel Barry.
2016-07-25 04:55:51 +03:00
Steve Dower 6ed63f31e9 Fixes default intermediate directory when building on Windows. 2016-07-24 18:03:22 -07:00
Steve Dower df450d1a18 Issue #27469: Adds a shell extension to the launcher so that drag and drop works correctly. 2016-07-16 16:17:33 -07:00
Berker Peksag 5f804e387e Issue #13849: Fix test_null_bytes under Windows 2016-07-23 08:42:41 +03:00
Berker Peksag 9adc1a38bd Issue #13849: Add tests for null byte checking in test_genericpath 2016-07-23 07:31:47 +03:00
Berker Peksag 1fd497ed91 Issue #27591: Set sigint_event to NULL if _PyOS_IsMainThread() returns false
Patch by Chris Angelico.
2016-07-23 07:13:14 +03:00
Martin Panter 84544c1020 Issue #27130: Fix handling of buffers exceeding UINT_MAX in “zlib” module
Patch by Xiang Zhang.
2016-07-23 03:02:07 +00:00
Victor Stinner 524714eeda socket: use INVALID_SOCKET
* Replace "fd = -1" with "fd = INVALID_SOCKET"
* Replace "fd < 0" with "fd == INVALID_SOCKET": SOCKET_T is unsigned on Windows

Bug found by Pavel Belikov ("Fragment N1"):
http://www.viva64.com/en/b/0414/#ID0ECDAE
2016-07-22 17:43:59 +02:00
Victor Stinner 0cec877230 socket: Fix internal_select()
Bug found by Pavel Belikov ("Fragment N1"):
http://www.viva64.com/en/b/0414/#ID0ECDAE
2016-07-22 17:26:53 +02:00
Zachary Ware 48e3f98206 Issue #25393: Fix probable copy/paste error in resource docs
Patch by Alakshendra Yadav.
2016-07-19 16:41:20 -05:00
Martin Panter 221945056d Issue #27528: Document and test warning messages must match at beginning 2016-07-19 02:26:38 +00:00
Martin Panter 95f53c13ce Issue #16191: Fix up references to renamed variables 2016-07-18 08:23:26 +00:00
Martin Panter 371731ebfd Issue #27507: Check for integer overflow in bytearray.extend()
Patch by Xiang Zhang.
2016-07-18 07:53:13 +00:00
Steve Dower 5852fa3f72 Removes unused files from PC folder. 2016-07-17 21:58:01 -07:00
Steve Dower 25f9cf479f Issue #27309: Enables proper Windows styles in python[w].exe manifest. 2016-07-17 21:39:13 -07:00
Steve Dower b22a67737e Issue #27533: Release GIL in nt._isdir 2016-07-17 20:49:38 -07:00
Steve Dower bc3e9cac7c Closes #27545: Remove pyshellext.vcxproj from pcbuild.proj 2016-07-17 20:45:29 -07:00
Berker Peksag ebf9fd31a8 Issue #27531: Update signature of Mock.assert_not_called method
Since 01ae1ac2daf4, it doesn't accept any arguments.

Patch by Michael Killough.
2016-07-17 15:26:46 +03:00
Stefan Krah 8c126f17f0 Issue #26974: Fix segfault in the presence of absurd subclassing. Proactively
eliminate all internal uses of overridden methods.
2016-07-17 14:01:42 +02:00
Serhiy Storchaka 80ab069f1b Issue #27419: Added temporary workaround for subinterpreters. 2016-07-17 14:15:28 +03:00
Serhiy Storchaka 6c2f1fd710 Issues #23147, #23148: Presumably fixed bugs in folding UnstructuredTokenList. 2016-07-17 13:25:15 +03:00
Serhiy Storchaka b3b65e618c Issue #27419: Standard __import__() no longer look up "__import__" in globals
or builtins for importing submodules or "from import".  Fixed handling an
error of non-string package name.
2016-07-17 12:47:17 +03:00
Serhiy Storchaka dec25afab1 Issue #17711: Fixed unpickling by the persistent ID with protocol 0.
Original patch by Alexandre Vassalotti.
2016-07-17 11:24:17 +03:00