ec3c103520
Issue #18709 : Fix CVE-2013-4238. The SSL module now handles NULL bytes
...
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for ``rfc822Name`` (email), ``dNSName`` (DNS) and
``uniformResourceIdentifier`` (URI).
2014-09-30 14:04:51 +02:00
49991deb6e
fix poor spelling
2014-04-14 12:15:28 -04:00
6ef2b36afa
disallow a negative idx parameter
2014-04-14 11:45:21 -04:00
99b5afab74
in scan_once, prevent the reading of arbitrary memory when passed a negative index
...
Bug reported by Guido Vranken.
2014-04-13 22:10:38 -04:00
fbf648ebba
complain when nbytes > buflen to fix possible buffer overflow ( closes #20246 )
2014-01-13 22:59:38 -05:00
a9217a42e6
Issue #17857 : Prevent build failures with pre-3.5.0 versions of sqlite3,
...
such as was shipped with Centos 5 and Mac OS X 10.4.
2013-04-28 14:10:27 +03:00
910bfb7beb
This local change was lost during the fixing of issue17192 to update
...
libffi to 3.0.13. (i'm not sure if it is needed anymore but see
issue 10309 for details which makes no mention of upstream; this
change is already in 3.3 and 3.4 but may need reapplying to 2.7
as done here)
2013-04-30 00:05:25 -07:00
933059710c
* Fix issue 17192 for 3.2 - reapply the issue11729 patch that was undone
...
in the merge fun from upstream which already had it in 3.0.13.
* Add the missing update to libffi.info.
2013-04-29 23:45:38 -07:00
ece12222ce
Merge
2013-03-19 15:57:19 -07:00
5aed330e37
Issue #10296 : Don't handle BreakPoint exceptions using
...
Structured Exception Handling on windows.
2013-03-19 15:24:10 -07:00
dd35162894
merge heads in 3.2
2013-03-19 15:03:26 -07:00
f5d7cc239e
#8862 : Fix curses cleanup with getchar is interrupted by a signal.
...
I have no idea how one would write a test for this.
Patch by July Tikhonov.
2013-03-19 16:23:09 -04:00
029273fc90
Fixes issue #17192 : Update the ctypes module's libffi to v3.0.13. This
...
specifically addresses a stack misalignment issue on x86 and issues on
some more recent platforms.
2013-03-18 17:11:20 -07:00
0158af38b7
Issue #17047 : remove doubled words found in 2.7 to 3.4 Modules/*,
...
as reported by Serhiy Storchaka and Matthew Barnett.
2013-03-11 17:42:46 -04:00
44d5214927
Issue #17278 : Fix a crash in heapq.heappush() and heapq.heappop() when the list is being resized concurrently.
2013-03-04 20:30:01 +01:00
67bfe80758
#17275 : Fix class name in init errors in C bufferedio classes.
...
This fixes an apparent copy-and-paste error.
Patch by Manuel Jacob.
2013-02-23 21:51:05 -05:00
59f5dee3d6
Issue #13153 : Tkinter functions now raise TclError instead of ValueError when
...
a string argument contains non-BMP character.
2013-02-18 13:01:52 +02:00
fa46816915
Issue #9669 : Protect re against infinite loops on zero-width matching in
...
non-greedy repeat. Patch by Matthew Barnett.
2013-02-16 21:23:53 +02:00
70ca0210e8
Issue #13169 : The maximal repetition number in a regular expression has been
...
increased from 65534 to 2147483647 (on 32-bit platform) or 4294967294 (on
64-bit).
2013-02-16 16:47:47 +02:00
0d09ba8e0b
Issue #16743 : Fix mmap overflow check on 32 bit Windows
2013-02-13 12:18:03 +00:00
e4ad8aacd1
Issue #4591 : Uid and gid values larger than 2**31 are supported now.
2013-02-12 09:24:16 +02:00
4de7457009
Issue #17173 : Remove uses of locale-dependent C functions (isalpha() etc.) in the interpreter.
...
I've left a couple of them in: zlib (third-party lib), getaddrinfo.c
(doesn't include Python.h, and probably obsolete), _sre.c (legitimate
use for the re.LOCALE flag).
2013-02-09 23:11:27 +01:00
01ad622a2c
Issue #16686 : Fixed a lot of bugs in audioop module.
...
* avgpp() and maxpp() no more crash on empty and 1-samples input fragment. They now work when peak-peak values are greater INT_MAX.
* ratecv() no more crashes on empty input fragment.
* Fixed an integer overflow in ratecv().
* Fixed an integer overflow in add() and bias() for 32-bit samples.
* reverse(), lin2lin() and ratecv() no more lose precision for 32-bit samples.
* max() and rms() no more returns negative result for 32-bit sample -0x80000000.
* minmax() now returns correct max value for 32-bit sample -0x80000000.
* avg(), mul(), tomono() and tostereo() now round negative result down and can return 32-bit sample -0x80000000.
* add() now can return 32-bit sample -0x80000000.
2013-02-09 11:10:53 +02:00
3cf96ac248
Issue #17073 : Fix some integer overflows in sqlite3 module.
2013-02-07 17:01:47 +02:00
43536e9e37
Issue #17089 : Expat parser now correctly works with string input not only when
...
an internal XML encoding is UTF-8 or US-ASCII. It now accepts bytes and
strings larger than 2 GiB.
2013-02-04 18:26:15 +02:00
95b7110a11
#17091 : update docstring for _thread.Lock.acquire.
...
The main docs were fixed to remove mention of None long ago,
but the docstring was not. Reported by Armin Rigo, patch
by Ian Cordasco.
2013-02-04 10:15:58 -05:00
19c4e0df29
Issue #6083 : Fix multiple segmentation faults occured when PyArg_ParseTuple
...
parses nested mutating sequence.
2013-02-04 12:47:24 +02:00
64359d203e
Update the embedded copy of the expat XML parser to 2.1.0. It brings
...
with it a vareity of bug fixes, both security and behavior. See
http://www.libexpat.org/ for the list.
NOTE: I already backported the expat hash randomization fix in March.
Fixes issue #14340 .
2012-07-14 14:12:35 -07:00
94dc6736bd
Issue #17106 : Fix a segmentation fault in io.TextIOWrapper when an underlying
...
stream or a decoder produces data of an unexpected type (i.e. when
io.TextIOWrapper initialized with text stream or use bytes-to-bytes codec).
2013-02-03 17:03:31 +02:00
6375257188
Back out fix for issue #13886 ; it introduced a new bug in interactive readline use.
2013-02-02 20:05:11 +01:00
aded2e5e59
In the _hashlib module, only initialize the static data for OpenSSL's
...
constructors once, to avoid memory leaks when finalizing and re-initializing
the Python interpreter.
2013-02-01 17:05:29 -08:00
b9817b01ed
Additional fix for Issue #12268 : The io module file object writelines() methods no longer abort early when one of its write system calls is interrupted (EINTR).
2013-02-01 13:03:39 -08:00
6f02ea02c8
Issue #13886 : Fix input() to not strip out supposedly-invalid input bytes.
...
Also fix sporadic failures in test_builtin due to dependence on whether the
readline module has previously been imported.
2013-01-27 14:01:42 +01:00
697e56d0f5
Issue #1602133 : 'environ' is not really available with shared libraries on OSX
...
There already was a workaround for this for framework builds on OSX,
this changeset enables the same workaround for shared libraries.
Closes #1602133
2013-01-25 17:57:13 +01:00
e7e9c32195
Clean trailing whitespace in itertoolsmodule.c.
2013-01-25 13:37:39 +02:00
a3e9128aba
Issue #13454 : Fix a crash when deleting an iterator created by itertools.tee()
...
if all other iterators were very advanced before.
2013-01-25 13:19:31 +02:00
986a56cefe
Issue #16953 : Fix socket module compilation on platforms with HAVE_BROKEN_POLL.
...
Patch by Jeffrey Armstrong.
2013-01-19 12:19:10 +01:00
441d30fac7
Issue #15989 : Fix several occurrences of integer overflow
...
when result of PyLong_AsLong() narrowed to int without checks.
This is a backport of changesets 13e2e44db99d and 525407d89277.
2013-01-19 12:26:26 +02:00
ad1d5f908a
Issue #10527 : Use poll() instead of select() for multiprocessing pipes
2013-01-15 01:01:01 +00:00
b09b167419
Issue #16922 : fixed findtext() to return empty Unicode string instead of empty bytes object when there's no text.
...
Patch by Serhiy Storchaka.
2013-01-13 05:22:05 -08:00
c44057dfbd
Issue #16367 : Fix FileIO.readall() on Windows for files larger than 2 GB
2013-01-03 03:33:21 +01:00
638fb9bbed
Issue #16828 : Fix error incorrectly raised by bz2.compress('').
...
Patch by Martin Packman.
2013-01-02 23:02:00 +01:00
e4110dc11f
Issue #9644 : Fix the encoding used by os.statvfs(): use the filesystem encoding
...
with the surrogateescape error handler, instead of UTF-8 in strict mode.
2013-01-01 23:05:55 +01:00
9866231eab
Issue #9586 : Redefine SEM_FAILED on MacOSX to keep compiler happy.
2013-01-01 17:29:44 +00:00
0b64c1415e
rename MathcObject to match object in doctrings for re module ( #16760 )
2012-12-25 18:48:54 +02:00
56ad5ed5ad
Issue #16443 : Add docstrings to regular expression match objects.
...
Patch by Anton Kasyanov.
2012-12-23 19:23:07 +02:00
3cbdaa3fee
Merge with 3.1 : Don't DECREF the ctypes error_object without the GIL held.
2012-12-21 11:20:53 +00:00
9946bd69fa
Don't DECREF the ctypes error_object without the GIL held.
2012-12-21 09:41:25 +00:00
737fb89dd1
Issue #16714 : use 'raise' exceptions, don't 'throw'.
...
Patch by Serhiy Storchaka.
2012-12-18 21:14:22 +02:00
7eb8a1a0cb
remove dead code
2012-12-15 15:43:58 -05:00
Georg Brandl
Benjamin Peterson
Serhiy Storchaka
Gregory P. Smith
Kristján Valur Jónsson
R David Murray
Terry Jan Reedy
Antoine Pitrou
Richard Oudkerk
Nadeem Vawda
Ronald Oussoren
Charles-François Natali
Eli Bendersky
Victor Stinner
Andrew Svetlov