Commit graph

14626 commits

Author SHA1 Message Date
R David Murray
505be2146f #14984: only import pwd on POSIX. 2013-09-18 08:52:38 -04:00
R David Murray
104aab956f #14984: On POSIX, enforce permissions when reading default .netrc.
Initial patch by Bruno Piguet.

This is implemented as if a useful .netrc file could exist without passwords,
which is possible in the general case; but in fact our netrc implementation
does not support it.  Fixing that issue will be an enhancement.
2013-09-17 20:30:02 -04:00
Georg Brandl
c17a8dfaca Fix tkinter regression introduced by the security fix in #16248. 2013-09-14 09:08:09 +02:00
Antoine Pitrou
0ee20ebbff Issue #16248: Disable code execution from the user's home directory by tkinter when the -E flag is passed to Python.
Patch by Zachary Ware.
2012-12-09 14:46:18 +01:00
Benjamin Peterson
c37a4fdf54 bump to 3.1.5 final 2012-04-06 13:17:25 -04:00
Benjamin Peterson
ba98788bc5 bump to 3.1.5rc2 2012-03-15 13:57:27 -05:00
Benjamin Peterson
36a6558891 version now 3.1.5rc1 2012-02-23 10:45:48 -05:00
Georg Brandl
9571155ae4 Remove setting hash seed to regrtest's random seed and re-execv()ing: this doesn't preserve Python flags and fails from a temp directory. 2012-02-20 22:06:02 +01:00
Georg Brandl
7c573f7a07 Fix dbm_gnu test relying on set order. 2012-02-20 22:48:06 +01:00
Benjamin Peterson
a3ed11bd34 don't rely on the order of module clearing 2012-02-20 15:20:37 -05:00
Georg Brandl
2daf6ae249 Issue #13703: add a way to randomize the hash values of basic types (str, bytes, datetime)
in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated.

The environment variable PYTHONHASHSEED and the new command line flag -R control this
behavior.
2012-02-20 19:54:16 +01:00
Charles-François Natali
ec1712a166 Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in SimpleXMLRPCServer
upon malformed POST request.
2012-02-18 14:42:57 +01:00
Vinay Sajip
2f7b286a8c Revert fix for #13807 mistakenly applied in this branch. 2012-02-03 18:23:05 +00:00
Vinay Sajip
889bb2969d Closes #13807: Now checks for sys.stderr being there before writing to it. 2012-01-20 11:23:02 +00:00
Benjamin Peterson
b462da8c0a fix this to not depend on dictionary order 2012-01-03 16:23:11 -06:00
Éric Araujo
ee19c772cb Remove mentions of previous license in profile module docs (#12417 followup).
Also remove an extra docstring.
2011-07-28 22:56:24 +02:00
Antoine Pitrou
8cdc40e3b0 Issue #11603: Fix a crash when __str__ is rebound as __repr__.
Patch by Andreas Stührk.
2011-07-15 21:15:07 +02:00
Charles-François Natali
e22813067e Issue #12502: asyncore: fix polling loop with AF_UNIX sockets. 2011-07-14 19:53:38 +02:00
Charles-François Natali
778db49da9 Issue #12352: Fix a deadlock in multiprocessing.Heap when a block is freed by
the garbage collector while the Heap lock is held.
2011-07-02 14:35:49 +02:00
Benjamin Peterson
afa44a8096 update profile license (closes #12417) 2011-06-27 09:14:34 -05:00
Benjamin Peterson
d858df20d0 bump to 3.1.4 2011-06-11 09:58:58 -05:00
Benjamin Peterson
1df0f214a9 fix regression in netrc comment handling (closes #12009) 2011-06-10 11:32:52 -05:00
Victor Stinner
e6eafa2ade Issue #10801: Fix test_unicode_filenames() of test_zipfile
Just try to open files from the ZIP for reading, don't extract them to avoid
UnicodeEncodeError if the filename is not encodable to the filesystem encoding
(e.g. ASCII locale encoding).
2011-06-10 16:32:54 +02:00
Benjamin Peterson
5f250fbafe update pydoc-topics 2011-05-29 16:09:08 -05:00
Benjamin Peterson
9a63745273 bump to 3.1.4rc1 2011-05-29 16:06:00 -05:00
Éric Araujo
e4427bf9c9 Branch merge 2011-05-29 17:56:20 +02:00
Éric Araujo
489c8ff26b Fix test_build_py when sys.dont_write_bytecode is true (#9831).
The tests now pass all combinations of -O/-OO and -B.  See also #7071
and #6292 for previous variations on the same theme.

test_versionpredicate needs a skip when sys.flags.optimize is true, but
I don’t know how to make that work with a DocTestSuite.
2011-05-28 23:32:50 +02:00
Ned Deily
b8e59f77e6 Issue #985064: Make plistlib more resilient to faulty input plists.
Patch by Mher Movsisyan.
2011-05-28 02:19:19 -07:00
Ned Deily
9a7c524dc6 Issue #9670: Increase the default stack size for secondary threads on
Mac OS X and FreeBSD to reduce the chances of a crash instead of a
"maximum recursion depth" RuntimeError exception.
(patch by Ronald Oussoren)
2011-05-28 00:19:56 -07:00
Éric Araujo
dec2067b2a Branch merge 2011-05-26 16:49:59 +02:00
Victor Stinner
a80987f20d Issue #12175: RawIOBase.readall() now returns None if read() returns None. 2011-05-25 22:47:16 +02:00
Victor Stinner
b79f28ccbd Issue #12175: FileIO.readall() now raises a ValueError instead of an IOError if
the file is closed.
2011-05-25 22:09:03 +02:00
Éric Araujo
29ef0064de Branch merge 2011-05-25 18:12:22 +02:00
Victor Stinner
8fdfc20fc4 Issue #12057: Add tests for the HZ encoding 2011-05-25 00:06:51 +02:00
Victor Stinner
6bcbef7da0 Issue #12100: Don't reset incremental encoders of CJK codecs at each call to
their encode() method anymore, but continue to call the reset() method if the
final argument is True.
2011-05-24 22:17:55 +02:00
Benjamin Peterson
f847393308 backout 8b384de4e780, so a proper fix can be considered (#5715) 2011-05-24 12:50:34 -05:00
Benjamin Peterson
a7cdb0f218 generally, sockets should be closed after they're used 2011-05-24 12:06:31 -05:00
Charles-François Natali
7b54e7562d Issue #5715: In socketserver, close the server socket in the child process. 2011-05-24 18:23:15 +02:00
Benjamin Peterson
7963a35b41 correctly lookup __dir__ 2011-05-23 16:11:05 -05:00
Victor Stinner
2cca057284 test_codecs now removes the temporay file (created by the test) 2011-05-23 14:51:42 +02:00
Victor Stinner
3c8d12d6b8 Issue #10801: Remove a debug print() from test_zipfile 2011-05-22 22:12:27 +02:00
Victor Stinner
4925cde1cc Issue #12124: zipimport doesn't keep a reference to zlib.decompress() anymore
to be able to unload the module.
2011-05-20 00:16:09 +02:00
Victor Stinner
ae8856fe36 Ooops, add the missing file of the backport of commit 33543b4e0e5d from Python
3.2 (#10801: In zipfile, support different encodings for the header and the
filenames.  Patch by MvL, test by Eli Bendersky.)
2011-05-18 13:48:41 +02:00
Victor Stinner
ff1d2f4cc5 Backport commit 33543b4e0e5d from Python 3.2: #10801: In zipfile, support
different encodings for the header and the filenames.  Patch by MvL, test by
Eli Bendersky.
2011-05-18 13:43:23 +02:00
Ronald Oussoren
02a67ac72b Fix #10154 and #10090: locale normalizes the UTF-8 encoding to "UTF-8" instead of "UTF8"
On MacOSX and OpenBSD (and possibly other BSDs) "en_US.UTF-8" is a valid locale
while "en_US.UTF8" is not. As the former works on Linux as well it is better
to normalize to that value.
2011-05-17 12:44:54 +02:00
Victor Stinner
e98f177ca6 Issue #11614: Fix test_linecache, cjkencodings_test.py doesn't exist anymore 2011-05-16 17:18:51 +02:00
Victor Stinner
272e24356e Issue #11614: Fix importlib tests for the new __hello__ module 2011-05-16 16:57:18 +02:00
Victor Stinner
033a543ab1 Issue #12057: Convert CJK encoding testcase BLOB into multiple text files 2011-05-16 16:43:38 +02:00
Victor Stinner
c77b931196 Issue #11614: import __hello__ prints "Hello World!". Patch written by Andreas
Stührk.
2011-05-16 16:29:35 +02:00
Victor Stinner
d0e11ec5b0 Issue #10756: atexit normalizes the exception before displaying it. Patch by
Andreas Stührk.

Backport a fix already applied to Python 3.2+ (4a82be47a948 + 5060a92a8597).
2011-05-15 18:57:44 +02:00