Commit Graph

3193 Commits

Author SHA1 Message Date
Matthias Klose b7180a89b3 Merge r82494 from the python2.6 branch:
Issue #7673: Fix security vulnerability (CVE-2010-2089) in the audioop module,
  ensure that the input string length is a multiple of the frame size
2010-10-17 10:48:14 +00:00
Matthias Klose 192b714f92 Merged revisions 81046 from the python2.6 branch:
Issue #8674: Fix incorrect and UB-inducing overflow checks in audioop
module.  Thanks Tomas Hoger for the patch.
2010-10-17 10:28:49 +00:00
Martin v. Löwis b3b56fcfcb Post 2.5.5. 2010-01-31 16:00:16 +00:00
Martin v. Löwis ec2aed6617 Prepare for 2.5.5. 2010-01-31 12:38:29 +00:00
Martin v. Löwis e7abfd7cef Prepare for 2.5.5c2. 2010-01-24 14:24:46 +00:00
Matthias Klose b8ec8a48ec - expat: Fix DoS via malformed XML (CVE-2009-3720). 2010-01-21 17:43:31 +00:00
Matthias Klose 166f80860e - Fix DoS via XML document with malformed UTF-8 sequences (CVE_2009_3560). 2010-01-21 17:41:47 +00:00
Martin v. Löwis 906e26e897 Prepare for 2.5.5c1. 2010-01-14 17:41:58 +00:00
Vinay Sajip b9c85c156b Issue #7403: logging: Fixed possible race condition in lock creation. 2009-11-27 15:34:35 +00:00
Philip Jenvey 4c9c260c1a #6990: clear threading.local's key only after its thread state is removed:
fixes local subclasses leaving old state around after a ref cycle GC which
could be recycled by new locals
(backported from r75123)
2009-09-29 05:30:42 +00:00
Lars Gustäbel 7623294cb7 Issue #5068: Fixed the tarfile._BZ2Proxy.read() method that would loop
forever on incomplete input. That caused tarfile.open() to hang when used
with mode 'r' or 'r:bz2' and a fileobj argument that contained no data or
partial bzip2 compressed data.

(backported from r70523)
2009-03-22 20:48:03 +00:00
Guido van Rossum f73bf85942 News for issue 5389 fix. 2009-03-05 21:49:40 +00:00
Martin v. Löwis 3b43e46b3d Prepare for 2.5.4. 2008-12-23 13:18:53 +00:00
Martin v. Löwis 3c08e45b70 Revert patch for #1706039, as it can crash the interpreter. 2008-12-23 13:10:43 +00:00
Martin v. Löwis edf14317e3 Backport of r67908:
Added test case to ensure attempts to read from a file opened for writing
fail.
2008-12-23 13:07:51 +00:00
Martin v. Löwis b90b144c47 Post 2.5.3. 2008-12-20 03:38:16 +00:00
Martin v. Löwis 3d9eecb0bb Prepare for 2.5.3. 2008-12-19 15:08:45 +00:00
Martin v. Löwis e467f43373 Build against system Tcl framework. 2008-12-19 15:05:38 +00:00
Martin v. Löwis 20fde6641a In the OSX installer, update SQLite to 3.6.7, and change bsddb URL. 2008-12-17 18:03:01 +00:00
Martin v. Löwis d6e258a5a7 Add 2.5.3 final section. 2008-12-13 22:32:24 +00:00
Martin v. Löwis 073ff240e7 Prepare for 2.5.3c1. 2008-12-13 15:42:40 +00:00
Martin v. Löwis 084486b234 Issue #1706039: Support continued reading from a file even after
EOF was hit.
2008-12-13 15:36:49 +00:00
Martin v. Löwis 710fb8bf45 Issue #1040026: Fix os.times result on systems where HZ is incorrect. 2008-12-13 15:14:30 +00:00
Martin v. Löwis c252d9bc08 Issue #3767: Convert Tk object to string in tkColorChooser. 2008-12-13 15:09:44 +00:00
Martin v. Löwis afb0dabaca Backport of r59654.
Issue #4342: Always convert Text.index result to string.
2008-12-13 15:04:58 +00:00
Martin v. Löwis 8a64048a22 Backport of r64212
Issue #1683: prevent forking from interfering in threading storage.
2008-12-13 14:59:04 +00:00
Martin v. Löwis e9859df798 Issue 3248: Allow placing ScrolledText in a PanedWindow. 2008-12-13 14:48:13 +00:00
Martin v. Löwis 358076f3e4 Backport of r66703:
Issue #3863: Disabled a unit test of fork being called from a thread
when running on platforms known to exhibit OS bugs when attempting that.
2008-12-13 14:42:53 +00:00
Martin v. Löwis 46d410616d Issue #4228: Pack negative values the same way as 2.4
in struct's L format.
2008-12-13 14:34:06 +00:00
Martin v. Löwis ec96c0205b Issue #4368: Don't define _XOPEN_SOURCE on FreeBSD 4.*. 2008-12-13 14:13:52 +00:00
Mark Dickinson 3f122784a3 Issue #4084: fix bug in handling of NaNs in Decimal.max, Decimal.min,
Decimal.max_mag and Decimal.min_mag.
2008-12-11 09:06:49 +00:00
Jeffrey Yasskin 6f5d3f326f Backport issue 4597 to python 2.5.3: Fixed several opcodes that weren't always
propagating exceptions.
2008-12-10 17:23:20 +00:00
Hirokazu Yamamoto 6f63190ded Issue #4302: Minor corrections to smtplib. (Backport r60975) 2008-12-10 09:54:59 +00:00
Jeffrey Yasskin 478a1aa537 Backported issue #4589 to Python 2.5.3: Propagated an exception thrown by a
context manager's __exit__ method's result while it's being converted to bool.
2008-12-10 07:28:12 +00:00
Amaury Forgeot d'Arc ef633d7c5d #4317: Fix an Array Bounds Read in imageop.rgb2rgb8.
Backport of r67266
2008-11-18 22:35:48 +00:00
Benjamin Peterson 42fe1a2ff8 backport r67246 from the trunk 2008-11-17 23:35:24 +00:00
Hirokazu Yamamoto 007ee17e21 Issue #3774: Fixed an error when create a Tkinter menu item without command
and then remove it. Written by Guilherme Polo (gpolo). Backport of r67082.
2008-11-03 18:18:08 +00:00
Benjamin Peterson 6f08e85ad9 backport r67077 from the trunk: parser module now correctly validates relative imports 2008-11-03 15:19:35 +00:00
Amaury Forgeot d'Arc 3b335ff340 Issue #4176: Pickle would crash the interpreter when a __reduce__ function
does not return an iterator for the 4th and 5th items.
(sequence-like and mapping-like state)

Backport of r67049.
2008-10-30 21:40:05 +00:00
Thomas Heller 3e06faec4f Modify ctypes types with 'official' functions. Backport from trunk,
snv rev 59943 and 59946.
2008-10-18 21:33:44 +00:00
Gerhard Häring f80527679b Issue #4046: Backport of issue #3312's patch: fixes two crashes in the sqlite3
module.
2008-10-08 08:45:16 +00:00
Benjamin Peterson 833beab0e6 backport r66689: imageop could segfault due to poor argument validation 2008-09-30 01:46:48 +00:00
Brett Cannon 70f1192dfc Backport of r66677: _lsprof crasher when a bad external timer is used during
garbage collection of a Profiler object.
2008-09-29 03:57:24 +00:00
Amaury Forgeot d'Arc b50f9926ca #3967: Correct a crash in count() and find() methods of string-like objects.
For example:
   "".count("xxxx", sys.maxint, 0)

Backport of r66631.
2008-09-26 22:46:01 +00:00
Georg Brandl 4235e6f111 #3968: fix missing update() call in end_fill(). 2008-09-26 07:17:03 +00:00
Benjamin Peterson d1c7d07d67 make sure to give a 'as' and 'with' parser warning even after import statements #3936 2008-09-25 20:46:05 +00:00
Thomas Heller 8e97ea9c6b Fix issue #3547: ctypes is confused by bitfields of varying integer types
Reviewed by Fredrik Lundh and Skip Montanaro.

Backport from trunk.
2008-09-24 19:00:21 +00:00
Gregory P. Smith a7a94a0a21 Backport r66141 from trunk:
- Issue #3678: Correctly pass LDFLAGS and LDLAST to the linker on shared
   library targets in the Makefile.
2008-09-22 00:22:44 +00:00
Benjamin Peterson c610afbca4 backport r66496: integer overflow in _hashopenssl #3886 2008-09-18 01:27:26 +00:00
Gregory P. Smith cae7f886e3 rerun autoconf after r66288, add the Misc/NEWS entry. 2008-09-07 06:44:12 +00:00