Commit graph

10165 commits

Author SHA1 Message Date
Georg Brandl
09a7c72cad Merge from 3.1: Issue #13703: add a way to randomize the hash values of basic types (str, bytes, datetime)
in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated.

The environment variable PYTHONHASHSEED and the new command line flag -R control this
behavior.
2012-02-20 21:31:46 +01:00
Benjamin Peterson
a3ed11bd34 don't rely on the order of module clearing 2012-02-20 15:20:37 -05:00
Georg Brandl
2daf6ae249 Issue #13703: add a way to randomize the hash values of basic types (str, bytes, datetime)
in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated.

The environment variable PYTHONHASHSEED and the new command line flag -R control this
behavior.
2012-02-20 19:54:16 +01:00
Antoine Pitrou
dff46faa95 Fix use of assertRaises following c760bd844222 (spotted by Alex Gaynor). 2012-02-20 19:46:26 +01:00
Antoine Pitrou
ea6b4d5f70 Issue #13641: Decoding functions in the base64 module now accept ASCII-only unicode strings.
Patch by Catalin Iacob.
2012-02-20 19:30:23 +01:00
Antoine Pitrou
c541f8ef40 Issue #14043: Speed up importlib's _FileFinder by at least 8x, and add a new importlib.invalidate_caches() function.
importlib is now often faster than imp.find_module() at finding modules.
2012-02-20 01:48:16 +01:00
Benjamin Peterson
85c71ae882 fix test now that staticmethod and classmethod are bigger 2012-02-19 19:16:47 -05:00
Antoine Pitrou
c135fa424e Fix last remaining build issues of _ssl under old OpenSSLs. Patch by Vinay. 2012-02-19 21:22:39 +01:00
Benjamin Peterson
b900d6a78c initialize __dict__ if needed 2012-02-19 10:17:30 -05:00
Benjamin Peterson
01d7eba316 allow arbitrary attributes on classmethod and staticmethod (closes #14051) 2012-02-19 01:10:25 -05:00
Jesus Cea
fbc6f943e0 Test for issue #13500 2012-02-19 03:54:29 +01:00
Jesus Cea
14ed7f23c2 Test for issue #13500 2012-02-19 03:52:23 +01:00
Charles-François Natali
3ccc918b4a Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in SimpleXMLRPCServer
upon malformed POST request.
2012-02-18 15:02:10 +01:00
Charles-François Natali
cd96b4f1ff Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in SimpleXMLRPCServer
upon malformed POST request.
2012-02-18 14:53:41 +01:00
Florent Xicluna
1639505c38 fix the _namespace_map cleanup for cElementTree tests. 2012-02-16 23:28:35 +01:00
Florent Xicluna
e59a306081 The C accelerator was not always imported for cElementTree's tests. (there's still an issue with --huntrleaks switch) 2012-02-16 23:17:31 +01:00
Charles-François Natali
4a72ebe34b Issue #13878: Fix random test_sched failures. 2012-02-16 19:51:45 +01:00
Charles-François Natali
f670ca5e70 Issue #13878: Fix random test_sched failures. 2012-02-16 19:49:48 +01:00
Eli Bendersky
292f9a891d make TestAccelerator[Not]Imported for ElementTree more robust 2012-02-16 19:55:29 +02:00
Eli Bendersky
66e6f8e525 Disabling a test that fails on some bots. Will investigate the failure soon 2012-02-16 18:08:44 +02:00
Gregory P. Smith
5b791fb548 Issue #2489: Fix bug in _copy loop that could consume 100% cpu on EOF. 2012-02-16 00:35:43 -08:00
Gregory P. Smith
a124a688a2 don't use assertSameElements. 2012-02-16 00:34:12 -08:00
Gregory P. Smith
05f5953ab4 Issue #2489: Fix bug in _copy loop that could consume 100% cpu on EOF. 2012-02-16 00:29:12 -08:00
Eli Bendersky
da57819efa in the tests of ElementTree, verify that the C accelerator is imported or not imported as expected 2012-02-16 06:52:39 +02:00
Victor Stinner
4aec77617f (Merge 3.2) Issue #13913: Another fix test_pep3120 for the UTF-8 codec name 2012-02-15 23:45:34 +01:00
Victor Stinner
5c724a804a Issue #13913: Another fix test_pep3120 for the UTF-8 codec name 2012-02-15 23:44:03 +01:00
Victor Stinner
10e467c963 (Merge 3.2) Issue #13913: Fix test_pep3120 for the UTF-8 codec name 2012-02-15 22:25:51 +01:00
Victor Stinner
1303298d06 Issue #13913: Fix test_pep3120 for the UTF-8 codec name 2012-02-15 22:24:17 +01:00
Antoine Pitrou
482ee66cb7 Issue #7644: Add tests for the file argument of NNTP.head() and NNTP.body().
Patch by Hynek Schlawack.
2012-02-15 18:53:49 +01:00
Antoine Pitrou
2640b52237 Issue #7644: Add tests for the file argument of NNTP.head() and NNTP.body().
Patch by Hynek Schlawack.
2012-02-15 18:53:18 +01:00
Antoine Pitrou
06b57ef958 Issue #10287: nntplib now queries the server's CAPABILITIES first before sending MODE READER, and only sends it if not already in READER mode.
Patch by Hynek Schlawack.
2012-02-14 23:30:35 +01:00
Antoine Pitrou
71135624d8 Issue #10287: nntplib now queries the server's CAPABILITIES first before sending MODE READER, and only sends it if not already in READER mode.
Patch by Hynek Schlawack.
2012-02-14 23:29:34 +01:00
Ezio Melotti
5e4d908704 Merge the indexfix and comments clean up. 2012-02-13 20:28:46 +02:00
Ezio Melotti
e31ddedb0e Fix an index and clean up comments. 2012-02-13 20:20:00 +02:00
Ezio Melotti
610a0b673e Merge fix for HTMLParser and improvements in declarations handling. 2012-02-13 15:52:25 +02:00
Ezio Melotti
f4ab491901 Improve handling of declarations in HTMLParser. 2012-02-13 15:50:37 +02:00
Ezio Melotti
86f67123be Fix htmlparser tests to always use the right collector. 2012-02-13 14:11:27 +02:00
Florent Xicluna
6c3da6ebc2 Fix xml_etree_c test error (follow up of issue #13988). 2012-02-13 12:14:52 +01:00
Florent Xicluna
a72a98f24a Issue #13988: cElementTree is deprecated and the _elementtree accelerator is automatically used whenever available. 2012-02-13 11:03:30 +01:00
Ezio Melotti
d1c7b1afe8 #13993: merge with 3.2. 2012-02-13 11:42:29 +02:00
Ezio Melotti
5211ffe4df #13993: HTMLParser is now able to handle broken end tags when strict=False. 2012-02-13 11:24:50 +02:00
Antoine Pitrou
425b8e85a9 Issue #10287: nntplib now queries the server's CAPABILITIES again after authenticating (since the result may change, according to RFC 4643).
Patch by Hynek Schlawack.
2012-02-12 19:15:09 +01:00
Antoine Pitrou
54411c1784 Issue #10287: nntplib now queries the server's CAPABILITIES again after authenticating (since the result may change, according to RFC 4643).
Patch by Hynek Schlawack.
2012-02-12 19:14:17 +01:00
Ross Lagerwall
2f234db3eb Merge with remote. 2012-02-12 11:13:06 +02:00
Ross Lagerwall
003c7a3fca Fix a typo. 2012-02-12 09:02:01 +02:00
Ross Lagerwall
ab66d2a6cb Attempt to speed up some subprocess tests (and hopefully keep them reliable). 2012-02-12 09:01:30 +02:00
Nadeem Vawda
ae557d767f Fix seekable() in BZ2File and LZMAFile to check whether the underlying file supports seek(). 2012-02-12 01:51:38 +02:00
Ezio Melotti
176630ec19 #13960: merge with 3.2. 2012-02-10 10:50:49 +02:00
Ezio Melotti
fa3702dc28 #13960: HTMLParser is now able to handle broken comments when strict=False. 2012-02-10 10:45:44 +02:00
Antoine Pitrou
81a1fa5c77 get_terminal_size() can also fail with ENOTTY if the fd is not connected to a terminal. 2012-02-09 00:11:00 +01:00