Commit Graph

10393 Commits

Author SHA1 Message Date
Serhiy Storchaka 0189a46ec5 Issue #18037: 2to3 now escapes '\u' and '\U' in native strings. 2013-10-03 12:08:22 +03:00
Serhiy Storchaka fdda200195 Issue #19137: The pprint module now correctly formats empty set and frozenset
and instances of set and frozenset subclasses.
2013-10-02 11:40:26 +03:00
Barry Warsaw d5849f545e - Issue #16040: CVE-2013-1752: nntplib: Limit maximum line lengths to 2048 to
prevent readline() calls from consuming too much memory.  Patch by Jyrki
  Pulliainen.
2013-09-30 19:09:29 -04:00
Barry Warsaw 42faa55124 - Issue #16040: CVE-2013-1752: nntplib: Limit maximum line lengths to 2048 to
prevent readline() calls from consuming too much memory.  Patch by Jyrki
  Pulliainen.
2013-09-30 18:35:15 -04:00
Barry Warsaw e763a91f6a Fix typo in NEWS file. 2013-09-30 16:45:40 -04:00
Antoine Pitrou 923852857d Issue #12641: Avoid passing "-mno-cygwin" to the mingw32 compiler, except when necessary.
Patch by Oscar Benjamin.
2013-09-30 22:13:17 +02:00
Barry Warsaw c545a5ebd6 - Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to
prevent readline() calls from consuming too much member.  Patch by Jyrki
  Pulliainen.
2013-09-30 15:56:29 -04:00
Barry Warsaw 6c1bb7b4e3 - Issue #16037: HTTPMessage.readheaders() raises an HTTPException when more
than 100 headers are read.  Adapted from patch by Jyrki Pulliainen.
2013-09-29 13:59:06 -04:00
Antoine Pitrou 87c99a0d37 Properly initialize all fields of a SSL object after allocation. 2013-09-29 19:52:45 +02:00
Antoine Pitrou 0879b168bf Issue #4366: Fix building extensions on all platforms when --enable-shared is used. 2013-09-29 01:48:40 +02:00
Serhiy Storchaka cfa5574405 Issue #18950: Fix miscellaneous bugs in the sunau module.
Au_read.readframes() now updates current file position and reads correct
number of frames from multichannel stream.  Au_write.writeframesraw() now
correctly updates current file position.  Au_read and Au_write now correctly
work with file object if start file position is not a zero.
2013-09-28 21:31:36 +03:00
Barry Warsaw d6fddf3d15 - Issue #16038: CVE-2013-1752: ftplib: Limit amount of data read by
limiting the call to readline().  Original patch by Michał
  Jastrzębski and Giampaolo Rodola.

with test fixes by Serhiy Storchaka.
2013-09-25 09:36:58 -04:00
Barry Warsaw 4e95d60191 - Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to
limit line length.  Patch by Emil Lind.
2013-09-22 16:07:09 -04:00
Serhiy Storchaka 60bf0e4daa Issue #18050: Fixed an incompatibility of the re module with Python 2.7.3
and older binaries.
2013-09-20 21:25:53 +03:00
R David Murray c64566e30f #19037: adjust file times *before* moving maildir files into place.
This avoids race conditions when other programs are monitoring
the maildir directory.  Patch by janzert.
2013-09-18 08:35:45 -04:00
Serhiy Storchaka e787bce79c Issue #18873: IDLE, 2to3, and the findnocoding.py script now detect Python
source code encoding only in comment lines.
2013-09-17 00:00:46 +03:00
R David Murray 74213e4ee9 Merge #14984: On POSIX, enforce permissions when reading default .netrc. 2013-09-16 14:32:54 -04:00
R David Murray 4189b67a66 #14984: On POSIX, enforce permissions when reading default .netrc.
Initial patch by Bruno Piguet.

This is implemented as if a useful .netrc file could exist without passwords,
which is possible in the general case; but in fact our netrc implementation
does not support it.  Fixing that issue will be an enhancement.
2013-09-16 13:48:44 -04:00
Andrew Kuchling 503baf9ecd #16042: CVE-2013-1752: Limit amount of data read by limiting the call to readline().
The SSLFakeFile.readline() method needs to support limiting readline() as
well.  It's not a full emulation of readline()'s signature, but this class
is only used by smtplib's code, so it doesn't have to be.

Modified version of original patch by Christian Heimes.
2013-09-15 13:11:47 -04:00
Raymond Hettinger 39659f22fa Issue #19018: The heapq.merge() function no longer suppresses IndexError 2013-09-14 22:17:39 -07:00
Senthil Kumaran d4fac04fde Fix SimpleHTTPServer's request handling case on trailing '/'.
Patch contributed by Vajrasky Kok. Addresses Issue #17324
2013-09-13 00:18:55 -07:00
Serhiy Storchaka b06f536cb7 Issue #18784: The uuid module no more attempts to load libc via ctypes.CDLL,
if all necessary functions are already found in libuuid.
Patch by Evgeny Sologubov.
2013-09-13 07:52:00 +03:00
Serhiy Storchaka e03c74a1b6 Issue #18988: The "Tab" key now works when a word is already autocompleted. 2013-09-11 22:49:06 +03:00
Serhiy Storchaka 7d12ca5fd4 Fix a typo. (closes #18953) 2013-09-08 20:43:16 +03:00
Michael Foord 050e9e5c59 Closes issue 14971.
unittest test discovery no longer gets confused when a function
has a different __name__ than its name in the TestCase class dictionary.
2013-09-08 15:34:27 +12:00
Eli Bendersky 8c7e925f6e Close #18849: Fixed a Windows-specific tempfile bug where collision with an
existing directory caused mkstemp and related APIs to fail instead of
retrying. Report and fix by Vlad Shcherbina.
2013-09-06 06:17:15 -07:00
Serhiy Storchaka cf29ba8cf0 Issue #18672: Fixed format specifiers for Py_ssize_t in debugging output in
the _sre moduel.
2013-09-05 18:02:57 +03:00
Serhiy Storchaka 6db9e88eff Issue #18830: inspect.getclasstree() no more produces duplicated entries even
when input list contains duplicates.
2013-09-05 17:28:10 +03:00
Victor Stinner 930c3c9e43 Issue #18909: Fix _tkinter.tkapp.interpaddr() on Windows 64-bit, don't cast
64-bit pointer to long (32 bits).
2013-09-05 00:26:15 +02:00
Antoine Pitrou 213fec4bff Issue #18876: The FileIO.mode attribute now better reflects the actual mode under which the file was opened.
Patch by Erik Bray.
2013-09-04 20:46:33 +02:00
Terry Jan Reedy 4c42735a99 Issue #18489: Add complete, gui-free tests for idlelib.SearchEngine.
Patch import and initialization in SearchEngine to make testing easier.
Improve docstrings, especially to clarify the double role of 'ok' parameters.
Original patch by Phil Webster.
2013-08-31 16:27:08 -04:00
Antoine Pitrou 33fc744ea3 Issue #18851: Avoid a double close of subprocess pipes when the child process fails starting. 2013-08-30 23:38:13 +02:00
Charles-François Natali 30a5445b30 Issue #18418: After fork(), reinit all threads states, not only active ones.
Patch by A. Jesse Jiryu Davis.
2013-08-30 23:30:50 +02:00
Ezio Melotti 290c6b3446 #18833: add a test for test_telnetlib. Patch by Alex Volkov. 2013-08-25 23:56:43 +03:00
Serhiy Storchaka 879a213736 Issue #18817: Fix a resource warning in Lib/aifc.py demo. 2013-08-25 19:12:33 +03:00
Christian Heimes 42831fefa7 Issue #11973: Fix a problem in kevent. The flags and fflags fields are now
properly handled as unsigned.
2013-08-25 14:57:00 +02:00
Christian Heimes 8ee5ffddf5 Issue #18747: Fix spelling errors in my commit message and comments,
thanks to Vajrasky Kok for proof-reading.
2013-08-25 14:19:16 +02:00
Barry Warsaw 82f8828317 - Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
  GENERAL_NAME_print() function to get the string represention of ASN.1
  strings for `rfc822Name` (email), `dNSName` (DNS) and
  `uniformResourceIdentifier` (URI).
2013-08-23 13:26:49 -04:00
Serhiy Storchaka b445558d84 Issue #16809: Fixed some tkinter incompabilities with Tcl/Tk 8.6. 2013-08-22 17:53:16 +03:00
Serhiy Storchaka 2ac1c1a31d Issue #16809: Tkinter's splitlist() and split() methods now accept Tcl_Obj
argument.

This is needed for support Tcl/Tk 8.6.
2013-08-22 17:42:45 +03:00
Christian Heimes ac6416424b Issue #18747: Update Misc/NEWS to reflect the latest changeset. 2013-08-22 13:22:37 +02:00
Antoine Pitrou 78254dc6fc Issue #18792: Use "127.0.0.1" or "::1" instead of "localhost" as much as possible, since "localhost" goes through a DNS lookup under recent Windows versions. 2013-08-22 00:39:46 +02:00
Serhiy Storchaka 4203570d01 Issue #17119: Fixed integer overflows when processing large Unicode strings
and tuples in the tkinter module.
2013-08-21 21:46:12 +03:00
Charles-François Natali b817faa4ce Issue #15233: Python now guarantees that callables registered with the atexit
module will be called in a deterministic order.
2013-08-21 18:25:00 +02:00
Christian Heimes 0d604cf65e Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork.
A pthread_atfork() child handler is used to seeded the PRNG with pid, time
and some stack data.
2013-08-21 13:26:05 +02:00
Serhiy Storchaka c360389453 Issue #8865: Concurrent invocation of select.poll.poll() now raises a
RuntimeError exception.  Patch by Christian Schubert.
2013-08-20 20:38:21 +03:00
Serhiy Storchaka a9885e93ee Issue #13461: Fix a crash in the TextIOWrapper.tell method and in the "replace"
error handler on 64-bit platforms.  Patch by Yogesh Chaudhari.
2013-08-20 20:08:53 +03:00
Christian Heimes 10107813ac Issue #18777: The ssl module now uses the new CRYPTO_THREADID API of
OpenSSL 1.0.0+ instead of the deprecated CRYPTO id callback function.
2013-08-19 17:36:29 +02:00
Christian Heimes ec8c2198bd add missing # 2013-08-18 03:11:11 +02:00
Christian Heimes b4ec842f39 Issue 18768: Correct doc string of RAND_edg(). Patch by Vajrasky Kok. 2013-08-17 17:25:18 +02:00