Commit Graph

86907 Commits

Author SHA1 Message Date
Donald Stufft d25d9dc1fc Upgrade setuptools to 27.1.1 2016-09-09 11:35:02 -04:00
Jason R. Coombs 1f5fd648b1 Issue #27960: Revert state to 675e20c38fdac6, backing out all changes by developed for Issue #12885. 2016-09-05 22:24:01 -04:00
Jason R. Coombs 79ae9671ff Issue #12885: Revert commits in 3.4 branch which is security-only fixes. 2016-09-01 23:27:45 -04:00
Jason R. Coombs 6f5d3fd4d1 Issue #12885: Correct issue reference in NEWS 2016-09-01 22:08:25 -04:00
Jason R. Coombs 8ac147d6ee Backed out changeset cc86e9e102e8 2016-09-01 21:55:22 -04:00
Jason R. Coombs 97eda155f8 Issue #12285: Update NEWS 2016-09-01 21:12:17 -04:00
Jason R. Coombs edc4b2fa67 Issue #12285: Replace implementation of findall with implementation from Setuptools 7ce820d524db. 2015-09-19 18:12:15 +02:00
Jason R. Coombs 1a04c447c9 Sort result to avoid spurious errors due to order. 2015-08-30 14:05:58 -04:00
Jason R. Coombs a2cf2292a2 Add docstring and additional test revealing nuances of the implementation as found in setuptools. 2015-09-19 17:32:51 +02:00
Jason R. Coombs 2c5278ad30 Add another test capturing the basic discovery expectation. 2015-08-30 13:26:48 -04:00
Jason R. Coombs a0c6c1c659 Issue #12285: Add test capturing failure. 2015-08-30 13:22:56 -04:00
Jason R. Coombs fa5e7cf997 Use modern mechanism for test discovery 2015-08-30 13:13:11 -04:00
Benjamin Peterson a12d92bec1 merge 3.3 (#27783) 2016-08-16 23:36:20 -07:00
Benjamin Peterson 1f0e7c9933 rearrange methodcaller_new so that the main error case does not cause uninitialized memory usage (closes #27783) 2016-08-16 23:35:35 -07:00
Benjamin Peterson 10bc0f6edf merge 3.3 (#27774) 2016-08-15 22:03:44 -07:00
Benjamin Peterson 3a27b0857e do not decref value borrowed from list (closes #27774) 2016-08-15 22:01:41 -07:00
Benjamin Peterson 432ea4ff37 fail when negative values are passed to instr() 2016-08-15 21:40:14 -07:00
Donald Stufft 5e4aafa258 Update setuptools/pip to 25.2.0/8.1.2 2016-08-14 16:09:56 -04:00
Benjamin Peterson 5295532adb merge 3.3 (closes #27760) 2016-08-13 18:36:55 -07:00
Benjamin Peterson 4f976513ef fix possible integer overflow in binascii.b2a_qp (closes #27760)
Reported by Thomas E. Hybel
2016-08-13 18:33:33 -07:00
Benjamin Peterson 40a77c3381 do not allow reading negative values with getstr() 2016-08-13 18:15:28 -07:00
Benjamin Peterson 59b6abd38c merge 3.3 (#27758) 2016-08-13 17:21:22 -07:00
Benjamin Peterson 6e01d90cc8 check for overflow in join_append_data (closes #27758)
Reported by Thomas E. Hybel
2016-08-13 17:17:06 -07:00
Vinay Sajip a0b2568627 Issue #20160: Merged fix from 3.3. 2016-08-05 21:43:25 +01:00
Vinay Sajip 6f25003291 Issue #20160: Handled passing of large structs to callbacks correctly. 2016-08-05 21:24:27 +01:00
Donald Stufft c6c2217f27 Merge 3.3 2016-08-03 18:48:17 -04:00
Donald Stufft fb7929044a Switch upload.pypi.io to upload.pypi.org 2016-08-03 18:43:38 -04:00
Senthil Kumaran 436fe5a447 [merge from 3.3] Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.
2016-07-30 23:34:34 -07:00
Senthil Kumaran 4cbb23f8f2 Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.
2016-07-30 23:24:16 -07:00
Martin Panter b7b5d35545 Issue #27369: Merge test_pyexpat from 3.3 into 3.4 2016-07-14 02:09:17 +00:00
Martin Panter d27a7c1f22 Issue #27369: Merge test_pyexpat from 3.2 into 3.3 2016-07-14 01:42:53 +00:00
Martin Panter 076ca6c3c8 Issue #27369: Don’t test error message detail that changed in Expat 2.2.0 2016-07-14 01:31:46 +00:00
Martin Panter 2cdcaf1353 Issue #22758: Move NEWS entry to Library section 2016-07-14 01:17:03 +00:00
R David Murray 8cf14964c6 #22758 null merge 2016-07-10 14:10:56 -04:00
R David Murray e3638944a9 #22758 null merge 2016-07-10 14:10:08 -04:00
R David Murray 5f21f43af7 #22758: fix regression in handling of secure cookies.
This backports the fix from #16611, per discussion with the release
manager.
2016-07-10 13:32:43 -04:00
Benjamin Peterson ede9a0ffa2 merge 3.3 2016-07-06 14:04:11 -07:00
Donald Stufft ad04a85aff Switch to the new upload url for PyPI 2016-07-06 16:18:39 -04:00
Donald Stufft 188c118ba5 Switch to the new upload url for PyPI 2016-07-06 15:27:35 -04:00
Larry Hastings 91058707cf Merge. 2016-06-26 19:43:00 -07:00
Larry Hastings ea684921c2 Post-release fixups for Python 3.4.5. 2016-06-26 19:41:21 -07:00
Larry Hastings 8e362213df Added tag v3.4.5 for changeset 619b61e505d0 2016-06-25 14:44:49 -07:00
Larry Hastings 98be9d500e Version bump for 3.4.5 final. 2016-06-25 14:44:30 -07:00
Larry Hastings 27d3529d87 Regenerate pydoc topics for 3.4.5 final. 2016-06-25 14:42:04 -07:00
Georg Brandl 4b9e75ba7f Docs: add html-stable autobuild variant 2016-06-15 08:57:32 +02:00
Benjamin Peterson 06d49bb895 sync ordering of stddef.h includes with expat 2.1.1 2016-06-13 23:41:19 -07:00
Matthias Klose a8bb04b9a8 Issue #26867: Ubuntu's openssl OP_NO_SSLv3 is forced on by default; fix test. 2016-06-12 23:40:00 -07:00
Larry Hastings 393c759324 Added tag v3.4.5rc1 for changeset 3631bb4a2490 2016-06-11 22:25:43 -07:00
Larry Hastings 463c3f3eef Release bump for 3.4.5rc1. 2016-06-11 22:24:03 -07:00
Larry Hastings 6e77ebe6e9 Regenerate pydoc topics for 3.4.5rc1. 2016-06-11 22:22:07 -07:00