Commit graph

41974 commits

Author SHA1 Message Date
R David Murray
505be2146f #14984: only import pwd on POSIX. 2013-09-18 08:52:38 -04:00
R David Murray
104aab956f #14984: On POSIX, enforce permissions when reading default .netrc.
Initial patch by Bruno Piguet.

This is implemented as if a useful .netrc file could exist without passwords,
which is possible in the general case; but in fact our netrc implementation
does not support it.  Fixing that issue will be an enhancement.
2013-09-17 20:30:02 -04:00
Georg Brandl
c17a8dfaca Fix tkinter regression introduced by the security fix in #16248. 2013-09-14 09:08:09 +02:00
Kristjan Valur Jonsson
9946bd69fa Don't DECREF the ctypes error_object without the GIL held. 2012-12-21 09:41:25 +00:00
Antoine Pitrou
0ee20ebbff Issue #16248: Disable code execution from the user's home directory by tkinter when the -E flag is passed to Python.
Patch by Zachary Ware.
2012-12-09 14:46:18 +01:00
Benjamin Peterson
2fd0b1a1b9 after 3.1.5 2012-04-11 16:46:54 -04:00
Benjamin Peterson
f6622c8a3e fix build without Py_DEBUG and DNDEBUG (closes #14509) 2012-04-09 14:53:07 -04:00
Benjamin Peterson
7fddb4b2f6 Added tag v3.1.5 for changeset 7395330e495e 2012-04-06 13:17:30 -04:00
Benjamin Peterson
c37a4fdf54 bump to 3.1.5 final 2012-04-06 13:17:25 -04:00
Benjamin Peterson
d6c75b5a03 Added tag v3.1.5rc2 for changeset 75db2bc69fc9 2012-03-15 13:58:31 -05:00
Benjamin Peterson
c7536c4ff5 merge heads 2012-03-15 13:57:38 -05:00
Benjamin Peterson
ba98788bc5 bump to 3.1.5rc2 2012-03-15 13:57:27 -05:00
Matthias Klose
20b303ed85 merge heads 2012-03-14 23:24:11 +01:00
Matthias Klose
0f4c16e29c - rename configure.in to configure.ac
- change references from configure.in to configure.ac
2012-03-14 23:10:15 +01:00
Gregory P. Smith
1be7cd0a78 move the Misc/NEWS entry to the right section. 2012-03-14 14:58:22 -07:00
Gregory P. Smith
8e91cf6a5e Fixes issue #14234: CVE-2012-0876: Randomize hashes of xml attributes
in the hash table internal to the pyexpat module's copy of the expat
library to avoid a denial of service due to hash collisions.
Patch by David Malcolm with some modifications by the expat project.
2012-03-14 14:26:55 -07:00
Benjamin Peterson
273cd1812a update copyright year 2012-02-23 10:53:44 -05:00
Benjamin Peterson
31833d4728 Added tag v3.1.5rc1 for changeset ee26aca3219c 2012-02-23 10:46:00 -05:00
Benjamin Peterson
36a6558891 version now 3.1.5rc1 2012-02-23 10:45:48 -05:00
Georg Brandl
c9a42070a6 Remove reST markup from --help output. Also: O(n**2) is dict construction, not single insertion. 2012-02-21 22:36:27 +01:00
Benjamin Peterson
69e9727657 ensure no one tries to hash things before the random seed is found 2012-02-21 11:08:50 -05:00
Georg Brandl
9571155ae4 Remove setting hash seed to regrtest's random seed and re-execv()ing: this doesn't preserve Python flags and fails from a temp directory. 2012-02-20 22:06:02 +01:00
Georg Brandl
7c573f7a07 Fix dbm_gnu test relying on set order. 2012-02-20 22:48:06 +01:00
Georg Brandl
06b1c4f68b Fix typo. 2012-02-20 23:09:59 +01:00
Georg Brandl
12897d7d39 Fix typo in conditional. 2012-02-20 23:49:29 +01:00
Benjamin Peterson
a3ed11bd34 don't rely on the order of module clearing 2012-02-20 15:20:37 -05:00
Georg Brandl
2daf6ae249 Issue #13703: add a way to randomize the hash values of basic types (str, bytes, datetime)
in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated.

The environment variable PYTHONHASHSEED and the new command line flag -R control this
behavior.
2012-02-20 19:54:16 +01:00
Charles-François Natali
ec1712a166 Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in SimpleXMLRPCServer
upon malformed POST request.
2012-02-18 14:42:57 +01:00
Vinay Sajip
2f7b286a8c Revert fix for #13807 mistakenly applied in this branch. 2012-02-03 18:23:05 +00:00
Antoine Pitrou
f2bf8a6ac5 Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV attack countermeasure. 2012-01-27 09:48:47 +01:00
Vinay Sajip
889bb2969d Closes #13807: Now checks for sys.stderr being there before writing to it. 2012-01-20 11:23:02 +00:00
Benjamin Peterson
b462da8c0a fix this to not depend on dictionary order 2012-01-03 16:23:11 -06:00
Éric Araujo
ee19c772cb Remove mentions of previous license in profile module docs (#12417 followup).
Also remove an extra docstring.
2011-07-28 22:56:24 +02:00
Antoine Pitrou
8cdc40e3b0 Issue #11603: Fix a crash when __str__ is rebound as __repr__.
Patch by Andreas Stührk.
2011-07-15 21:15:07 +02:00
Charles-François Natali
e22813067e Issue #12502: asyncore: fix polling loop with AF_UNIX sockets. 2011-07-14 19:53:38 +02:00
Charles-François Natali
778db49da9 Issue #12352: Fix a deadlock in multiprocessing.Heap when a block is freed by
the garbage collector while the Heap lock is held.
2011-07-02 14:35:49 +02:00
Benjamin Peterson
afa44a8096 update profile license (closes #12417) 2011-06-27 09:14:34 -05:00
Mark Dickinson
40d9ebe031 Issue #12228: Fix exchanged flag descriptions in stat.rst. Thanks Sandro Tosi. 2011-06-25 12:03:33 +02:00
Senthil Kumaran
fe9230aac6 Fix closes issue12261 - Minor documention changes in the urllib.parse.rst 2011-06-19 13:52:49 -07:00
Benjamin Peterson
acde6a0a40 onto 3.1.5 2011-06-11 11:33:01 -05:00
Benjamin Peterson
f2ff3054f9 Added tag v3.1.4 for changeset c918ec9f3a76 2011-06-11 09:59:17 -05:00
Benjamin Peterson
d858df20d0 bump to 3.1.4 2011-06-11 09:58:58 -05:00
Benjamin Peterson
1df0f214a9 fix regression in netrc comment handling (closes #12009) 2011-06-10 11:32:52 -05:00
Victor Stinner
e6eafa2ade Issue #10801: Fix test_unicode_filenames() of test_zipfile
Just try to open files from the ZIP for reading, don't extract them to avoid
UnicodeEncodeError if the filename is not encodable to the filesystem encoding
(e.g. ASCII locale encoding).
2011-06-10 16:32:54 +02:00
Martin v. Löwis
721bb33e3b Add 3.1.4 UUIDs. 2011-06-05 10:56:44 +02:00
Martin v. Löwis
4c226dac02 Do not add txt files twice. 2011-06-05 10:55:57 +02:00
Benjamin Peterson
52e61449e3 return NULL on error 2011-05-31 21:38:15 -05:00
Benjamin Peterson
a22c98de85 simply use the Python version for pyexpat.__version__ #12221 2011-05-31 18:59:49 -05:00
Benjamin Peterson
bb11bb0dbb Added tag v3.1.4rc1 for changeset 32fcb9e94985 2011-05-29 16:10:15 -05:00
Benjamin Peterson
5f250fbafe update pydoc-topics 2011-05-29 16:09:08 -05:00