Commit Graph

6754 Commits

Author SHA1 Message Date
Benjamin Peterson aed5a4ee73 rearrange methodcaller_new so that the main error case does not cause uninitialized memory usage (closes #27783) 2016-08-16 23:35:35 -07:00
Benjamin Peterson 0f3596a136 do not decref value borrowed from list (closes #27774) 2016-08-15 22:01:41 -07:00
Benjamin Peterson 505989c0e7 fail when negative values are passed to instr() 2016-08-15 21:40:14 -07:00
Ned Deily b97001ef46 Issue #10910: Update FreedBSD version checks for the ctype UTF-8 workaround.
The original problem has been fixed in newer versions of FreeBSD.
Patch by Dimitry Andric of the FreeBSD project.
2016-08-15 03:04:36 -04:00
Benjamin Peterson 6c08d9628a fix possible integer overflow in binascii.b2a_qp (closes #27760)
Reported by Thomas E. Hybel
2016-08-13 18:33:33 -07:00
Benjamin Peterson f670120cb7 do not allow reading negative values with getstr() 2016-08-13 18:15:28 -07:00
Benjamin Peterson d81ad0df71 check for overflow in join_append_data (closes #27758)
Reported by Thomas E. Hybel
2016-08-13 17:17:06 -07:00
Benjamin Peterson 04a5385353 fix possible overflow in encode_basestring_ascii (#23369) 2016-08-13 16:47:25 -07:00
Martin Panter 3d36f0f712 Spelling and grammar fixes in code comments and documentation 2016-07-28 02:37:04 +00:00
Martin Panter bc82de084c Issue #27641: Comment out regeneration rules when cross compiling 2016-07-29 05:52:32 +00:00
Senthil Kumaran 75d7b615ba Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue reported and patch contributed by Rémi Rampin.
2016-07-30 05:49:53 -07:00
Martin Panter a850ef698e Issue #27626: Spelling fixes in docs, comments and internal names
Based on patch by Ville Skyttä.
2016-07-28 01:11:04 +00:00
Martin Panter e2eacc02bc Issue #23943: Fix typos. Patch by Piotr Kasprzyk. 2016-07-28 03:04:04 +00:00
Martin Panter 801110b303 Issue #27490: Do not build pgen when cross-compiling
The dependendency on the $(PGEN) variable must only be
set when not cross-compiling. When cross-compiling,
$(PGEN) will not be used, so no need to build it.

Patch by Thomas Perl.
2016-07-28 01:28:27 +00:00
Martin Panter 2a0438d2e4 Issue #27581: Don’t rely on overflow wrapping in PySequence_Tuple()
Patch by Xiang Zhang.
2016-07-25 02:30:05 +00:00
Martin Panter 1e411c5c78 Issue #27130: Fix handling of buffers exceeding (U)INT_MAX in “zlib” module
Ported from patches by Xiang Zhang, Nadeem Vawda, and myself.
2016-07-23 04:22:09 +00:00
Martin Panter 0c08fe09f9 Issue #27507: Check for integer overflow in bytearray.extend()
Patch by Xiang Zhang.
2016-07-18 07:53:13 +00:00
Benjamin Peterson 6c4fa70da6 make too many nested blocks be a SyntaxError instead of a SystemError (closes #27514)
Patch by Ammar Askar.
2016-07-14 22:00:03 -07:00
Martin Panter 65e0d8ca65 Issue #27369: Don’t test error message detail that changed in Expat 2.2.0 2016-07-14 01:31:46 +00:00
Serhiy Storchaka 373773d5b2 Issue #27473: Fixed possible integer overflow in str, unicode and bytearray
concatenations and repetitions.  Based on patch by Xiang Zhang.
2016-07-12 15:46:57 +03:00
Martin Panter bf2dca96fb English spelling and grammar fixes 2016-07-11 07:51:37 +00:00
Martin Panter b362f75f6e Issue #25523: Correct "a" article to "an" article
This changes the main documentation, doc strings, source code comments, and a
couple error messages in the test suite. In some cases the word was removed
to fix the grammar.
2015-11-02 03:37:02 +00:00
Martin Panter 8c6849bfe6 Issue #23804: Fix SSL zero-length recv() calls to not block and raise EOF 2016-07-11 00:17:13 +00:00
Senthil Kumaran 2d2e6be39a [port to 2.7] - Issue #27466: Change time format returned by
http.cookie.time2netscape, confirming the netscape cookie format.
2016-07-10 08:34:21 -07:00
Serhiy Storchaka 3c9ce74c21 Issue #23908: os functions, open() and the io.FileIO constructor now reject
unicode paths with embedded null character on Windows instead of silently
truncate them.
2016-07-01 23:34:44 +03:00
Terry Jan Reedy 094338ef58 Update NEWS and idlelib NEWS.text. 2016-06-26 18:20:14 -04:00
Serhiy Storchaka 199b7d5662 Issue #22115: Fixed tracing Tkinter variables.
* trace_vdelete() with wrong mode no longer break tracing
* trace_vinfo() now always returns a list of pairs of strings
2016-06-26 17:41:14 +03:00
Benjamin Peterson 1d6879bb67 merge 2.7.12 release branch 2016-06-25 14:04:11 -07:00
Benjamin Peterson 1fae982b9b 2.7.12 final 2016-06-25 14:03:21 -07:00
Benjamin Peterson 7a5691f0ba merge 2.7.12 release branch 2016-06-21 23:13:33 -07:00
Benjamin Peterson 95d9555212 fix idle about dialog #27365 2016-06-21 23:12:54 -07:00
Martin Panter 4e6e565368 Fix English spelling and grammar errors 2016-06-20 07:52:50 +00:00
Serhiy Storchaka 4183387e79 Issue #27294: Numerical state in the repr for Tkinter event objects is now
represented as a compination of known flags.
2016-06-18 22:08:49 +03:00
Zachary Ware 0ffd26f7ff Issue #26930: Update Windows build to OpenSSL 1.0.2h 2016-06-15 17:12:38 -05:00
Benjamin Peterson 1563f164e5 2.7.12 release candidate 1 2016-06-11 14:46:26 -07:00
Benjamin Peterson d244a8f7cb upgrade expt to 2.1.1 (closes #26556) 2016-06-11 13:28:56 -07:00
Benjamin Peterson 2e1b7fc998 raise an error when STARTTLS fails 2016-06-11 13:16:42 -07:00
Terry Jan Reedy 391f1a4252 Issue #5124: NEWS entries. 2016-06-11 04:31:18 -04:00
doko@ubuntu.com a0f2295e0a - Issue #17500, and https://github.com/python/pythondotorg/issues/945: Remove
unused and outdated icons.
2016-06-10 18:22:25 +02:00
Victor Stinner eb063011ab Issue #22636: Avoid using a shell in the ctypes.util module
Replace os.popen() with subprocess.Popen.

If the "gcc", "cc" or "objdump" command is not available, the code was
supposed to raise an OSError exception. But there was a bug in the code. The
shell code returns the exit code 10 if the required command is missing, and the
code tries to check for the status 10. The problem is that os.popen() doesn't
return the exit code directly, but a status which should be processed by
os.WIFEXITED() and os.WEXITSTATUS(). In practice, the exception was never
raised. The OSError exception was not documented and ctypes.util.find_library()
is expected to return None if the library is not found.

Based on patch by Victor Stinner.
2014-10-16 09:42:45 +02:00
Serhiy Storchaka ef012cc7f7 Issue #27330: Fixed possible leaks in the ctypes module. 2016-06-16 22:08:11 +03:00
Zachary Ware c59a92b6f9 Issue #26930: Update Windows build to OpenSSL 1.0.2h 2016-06-15 17:12:38 -05:00
Serhiy Storchaka 77ccaaf946 Issue #27238: Got rid of bare excepts in the turtle module. Original patch
by Jelle Zijlstra.
2016-06-14 22:52:13 +03:00
Serhiy Storchaka d8b5942f7c Issue #26386: Fixed ttk.TreeView selection operations with item id's
containing spaces.
2016-06-14 12:46:14 +03:00
Serhiy Storchaka 1f7586eeb9 Issue #25455: Fixed a crash in repr of cElementTree.Element with recursive tag. 2016-06-12 10:06:32 +03:00
Martin Panter e52140caf1 #16484: Change PYTHONDOCS to "https:", and fix links to use lowercase
Implementation by Sean Rodman; test by Kaushik Nadikuditi.
2016-06-12 05:25:16 +00:00
Benjamin Peterson 6f3a8431cf off to 2.7.13 2016-06-11 15:12:35 -07:00
Matthias Klose 9aabaccb76 Issue #7356: ctypes.util: Make parsing of ldconfig output locale independent.
Previous fix was only made to dead and removed code.
2010-03-15 13:46:04 +00:00
Martin Panter 6af1c49bb4 Issue #25738: Don’t send message body for 205 Reset Content
Patch by Susumu Koshiba.
2016-06-08 07:16:14 +00:00
Martin Panter c36364491f Issue #21313: Tolerate truncated buildinfo in sys.version 2016-06-08 06:12:22 +00:00