summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Close 2.4 branch.2.4Georg Brandl2011-03-050-0/+0
|
* Fix tag references in 2.4 branch.Georg Brandl2011-03-051-65/+59
|
* Reverted back to r67866.Vinay Sajip2010-01-282-9/+4
|
* Restore the svn property changes in r76754Mark Dickinson2009-12-110-0/+0
|
* Issue #7470: logging: fix bug in Unicode encoding fallback.Vinay Sajip2009-12-110-0/+0
|
* Issue #7403: logging: Fixed possible race condition in lock creation.Vinay Sajip2009-11-272-4/+9
|
* Post 2.4.6.Martin v. Löwis2008-12-201-0/+6
|
* Tagging for release of Python 2.4.6Martin v. Löwis2008-12-191-0/+1
|
* Prepare for 2.4.6.v2.4.6Martin v. Löwis2008-12-195-10/+10
|
* - Mention CVE-2008-5031 in issue #4469.Matthias Klose2008-12-161-1/+1
|
* Add 2.4.6 final section.Martin v. Löwis2008-12-131-0/+7
|
* Tagging for release of Python 2.4.6c1Martin v. Löwis2008-12-131-0/+1
|
* Add 2.4.6 uuids.v2.4.6c1Martin v. Löwis2008-12-131-0/+2
|
* Prepare for 2.4.6c1.Martin v. Löwis2008-12-135-10/+15
|
* Backported r55839 and r61350Martin v. Löwis2008-12-135-19/+91
| | | | | | Issue #4469: Prevent expandtabs() on string and unicode objects from causing a segfault when a large width is passed on 32-bit platforms.
* - Tools/faqwiz/move-faqwiz.sh: Fix unsecure use of temporary files.Matthias Klose2008-11-302-3/+14
|
* #4317: Fix an Array Bounds Read in imageop.rgb2rgb8.Amaury Forgeot d'Arc2008-11-183-2/+5
| | | | Backport of r67266
* update svn:ignore hereBenjamin Peterson2008-11-170-0/+0
|
* backport the security fix part of r67246Benjamin Peterson2008-11-173-0/+24
|
* - Security Issue #2: imageop did not validate arguments correctly and couldMatthias Klose2008-11-123-168/+175
| | | | | | segfault as a result. CVE-2008-4864. backport r66689
* - Issue #2587: In the C API, PyString_FromStringAndSize() takes a signed sizeMatthias Klose2008-11-122-0/+12
| | | | | | | | parameter but was not verifying that it was greater than zero. Values less than zero will now raise a SystemError and return NULL to indicate a bug in the calling C code. CVE-2008-1887. backport r62261, r62271
* - Issues #2588, #2589: Fix potential integer underflow and overflowMatthias Klose2008-11-122-5/+20
| | | | conditions in the PyOS_vsnprintf C API function. CVE-2008-3144.
* - Issue #2586: Fix CVE-2008-1721, zlib crash fromMatthias Klose2008-11-122-0/+7
| | | | zlib.decompressobj().flush(val) when val is not positive.
* - Issue #1179: Fix CVE-2007-4965 and CVE-2008-1679, multiple integerMatthias Klose2008-11-123-12/+76
| | | | overflows in the imageop and rgbimgmodule modules.
* - Moved entries added after the 2.4.5 release to a new 2.4.6. entry.Matthias Klose2008-11-121-9/+29
|
* Security patches from Apple: prevent int overflow when allocating memoryNeal Norwitz2008-07-318-15/+87
|
* Backport r65182. This change modified from using the unsigned max valueNeal Norwitz2008-07-286-15/+57
| | | | | | | | | | | to the signed max value similar to 2.5 and trunk. Issue #2620: Overflow checking when allocating or reallocating memory was not always being done properly in some python types and extension modules. PyMem_MALLOC, PyMem_REALLOC, PyMem_NEW and PyMem_RESIZE have all been updated to perform better checks and places in the code that would previously leak memory on the error path when such an allocation failed have been fixed.
* Tag 2.4.5.Martin v. Löwis2008-03-111-0/+1
|
* Prepare for 2.4.5v2.4.5Martin v. Löwis2008-03-115-7/+17
|
* Tagging for release of Python 2.4.5c1Martin v. Löwis2008-03-021-0/+1
|
* Prepare for 2.4.5c1v2.4.5c1Martin v. Löwis2008-03-028-17/+23
|
* Backport of r60793:Martin v. Löwis2008-03-0217-38/+327
| | | | | | Added checks for integer overflows, contributed by Google. Some are only available if asserts are left in the code, in cases where they can't be triggered from Python code.
* Revert the following revisions, as they don't fix securityMartin v. Löwis2008-03-0223-211/+71
| | | | | | | problems: 52448, 52468, 52472, 52475, 52646, 52797, 52802, 52863, 52999, 53001, 53101, 53371, 53373, 53383, 53384, 53736, 53812, 53921, 55578, 55580, 55581, 55772, 55775, 56557, 57093, 57094, 58630, 60114
* Backport r60104 + r60111 from trunk.Gregory P. Smith2008-01-192-1/+17
| | | | | | - Issue #1336: fix a race condition in subprocess.Popen if the garbage collector kicked in at the wrong time that would cause the process to hang when the child wrote to stderr.
* Bug #1321: Fixed logic error in TimedRotatingFileHandler.__init__()Vinay Sajip2007-10-241-5/+5
|
* - mark the findCaller 2-element tuple/3-element tuple change as new in 2.4Matthias Klose2007-08-161-1/+1
|
* - fix build error with the findCaller backportMatthias Klose2007-08-161-1/+1
|
* Add uuids for upcoming 2.4.5 release.Martin v. Löwis2007-08-031-0/+2
|
* MacOS build script:Ronald Oussoren2007-07-261-5/+37
| | | | | - be more strict about the build environment - update some of the 3th party libraries (later patchlevels)
* Fix for Windows: close a temporary file before trying to delete it.Hye-Shik Chang2007-06-051-0/+2
|
* (Backport from r55770)Hye-Shik Chang2007-06-053-2/+21
| | | | | | Bug #1728403: Fix a bug that CJKCodecs StreamReader hangs when it reads a file that ends with incomplete sequence and sizehint argument for .read() is specified.
* Updated documentation for SysLogHandler (#1720726).Vinay Sajip2007-05-251-3/+4
|
* Updated documentation for SysLogHandler (#1720726).Vinay Sajip2007-05-251-2/+5
|
* Updated findCaller documentation.Vinay Sajip2007-05-251-3/+5
|
* HTML-escape the plain traceback in cgitb's HTML output, to preventGeorg Brandl2007-05-152-1/+6
| | | | | | the traceback inadvertently or maliciously closing the comment and injecting HTML into the error page. (backport from rev. 55348)
* Backported r51621 from p3yk:Thomas Wouters2007-02-252-4/+4
| | | | | Don't use a fixed temporary name (gdbm). Don't use our own temp name creation (dbm).
* Minor fix for currentframe (SF #1652788).Vinay Sajip2007-02-171-3/+3
|
* backport: fix trace.py --ignore-dirSkip Montanaro2007-02-112-1/+4
|
* Backport trunk revision 53527:Thomas Wouters2007-01-234-4/+10
| | | | | | | | | | | | | SF patch #1630975: Fix crash when replacing sys.stdout in sitecustomize When running the interpreter in an environment that would cause it to set stdout/stderr/stdin's encoding, having a sitecustomize that would replace them with something other than PyFile objects would crash the interpreter. Fix it by simply ignoring the encoding-setting for non-files. This could do with a test, but I can think of no maintainable and portable way to test this bug, short of adding a sitecustomize.py to the buildsystem and have it always run with it (hmmm....)
* Fixed bug in fileConfig where _handlerList was not being cleared. (SF #1632328)Vinay Sajip2007-01-111-0/+1
|
generated by cgit v0.12 at 2025-12-26 18:51:52 (GMT)