Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Issue #28563: Make plural form selection more lenient and accepting | Serhiy Storchaka | 2016-11-14 | 2 | -8/+20 |
| | | | | non-integer numbers. Django tests depend on this. | ||||
* | Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X | Serhiy Storchaka | 2016-11-12 | 2 | -1/+4 |
| | | | | when decode astral characters. | ||||
* | Issue #28563: Fixed possible DoS and arbitrary code execution when handle | Serhiy Storchaka | 2016-11-08 | 3 | -45/+216 |
| | | | | | plural form selections in the gettext module. The expression parser now supports exact syntax supported by GNU gettext. | ||||
* | Issue #26171: Prevent buffer overflow in get_data | Berker Peksag | 2016-09-14 | 2 | -0/+8 |
| | | | | Backport of 01ddd608b85c. | ||||
* | rearrange methodcaller_new so that the main error case does not cause ↵ | Benjamin Peterson | 2016-08-17 | 2 | -8/+9 |
| | | | | uninitialized memory usage (closes #27783) | ||||
* | do not decref value borrowed from list (closes #27774) | Benjamin Peterson | 2016-08-16 | 2 | -3/+3 |
| | |||||
* | fix possible integer overflow in binascii.b2a_qp (closes #27760) | Benjamin Peterson | 2016-08-14 | 2 | -9/+18 |
| | | | | Reported by Thomas E. Hybel | ||||
* | check for overflow in join_append_data (closes #27758) | Benjamin Peterson | 2016-08-14 | 2 | -4/+22 |
| | | | | Reported by Thomas E. Hybel | ||||
* | Issue #20160: Handled passing of large structs to callbacks correctly. | Vinay Sajip | 2016-08-05 | 3 | -2/+65 |
| | |||||
* | Switch upload.pypi.io to upload.pypi.org | Donald Stufft | 2016-08-03 | 3 | -4/+4 |
| | |||||
* | Prevent HTTPoxy attack (CVE-2016-1000110) | Senthil Kumaran | 2016-07-31 | 5 | -0/+42 |
| | | | | | | | Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin. | ||||
* | Issue #27369: Merge test_pyexpat from 3.2 into 3.3 | Martin Panter | 2016-07-14 | 2 | -4/+5 |
|\ | |||||
| * | Issue #27369: Don’t test error message detail that changed in Expat 2.2.03.2 | Martin Panter | 2016-07-14 | 2 | -4/+5 |
| | | |||||
| * | Issue #22758: Move NEWS entry to Library section | Martin Panter | 2016-07-14 | 1 | -3/+3 |
| | | |||||
* | | #22758 null merge | R David Murray | 2016-07-10 | 0 | -0/+0 |
|\ \ | |/ | |||||
| * | #22758: fix regression in handling of secure cookies. | R David Murray | 2016-07-10 | 3 | -11/+61 |
| | | | | | | | | | | This backports the fix from #16611, per discussion with the release manager. | ||||
* | | Switch to the new upload url for PyPI | Donald Stufft | 2016-07-06 | 3 | -4/+4 |
| | | |||||
* | | Issue #25709: Fixed problem with in-place string concatenation and utf-8 cache. | Serhiy Storchaka | 2015-12-02 | 3 | -0/+27 |
| | | |||||
* | | Issue #25940: Merge ETIMEDOUT fix from 3.2 into 3.3 | Martin Panter | 2016-01-15 | 1 | -1/+1 |
|\ \ | |/ | |||||
| * | Issue #25940: On Windows, connecting to port 444 returns ETIMEDOUT | Martin Panter | 2016-01-15 | 1 | -1/+3 |
| | | |||||
* | | Issue #25940: Merge self-signed.pythontest.net testing from 3.2 into 3.3 | Martin Panter | 2016-01-14 | 7 | -89/+111 |
|\ \ | |/ | |||||
| * | Issue #25940: Use self-signed.pythontest.net in SSL tests | Martin Panter | 2016-01-14 | 6 | -96/+97 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is instead of svn.python.org, whose certificate recently expired, and whose new certificate uses a different root certificate. The certificate used at the pythontest server was modifed to set the "basic constraints" CA flag. This flag seems to be required for test_get_ca_certs_ capath() to work (in Python 3.4+). Added the new self-signed certificate to capath with the following commands: cp Lib/test/{selfsigned_pythontestdotnet.pem,capath/} c_rehash -v Lib/test/capath/ c_rehash -v -old Lib/test/capath/ # Note the generated file names cp Lib/test/capath/{selfsigned_pythontestdotnet.pem,0e4015b9.0} mv Lib/test/capath/{selfsigned_pythontestdotnet.pem,ce7b8643.0} The new server responds with "No route to host" when connecting to port 444. | ||||
| * | Issue #25940: Backport self-signed.pythontest.net testing for test_httplib | Georg Brandl | 2014-11-05 | 2 | -7/+24 |
| | | | | | | | | | | The svn.python.org server recently changed root certificate, causing the test to fail. This backports revision 4985375db40f. | ||||
* | | remove some copyright notices supserseded by the toplevel ones | Benjamin Peterson | 2016-01-01 | 4 | -31/+0 |
| | | |||||
* | | add 2015 and 2016 | Benjamin Peterson | 2016-01-01 | 1 | -1/+1 |
| | | |||||
* | | reflow | Benjamin Peterson | 2016-01-01 | 1 | -2/+3 |
| | | |||||
* | | 2016 will be another year of writing copyrighted code | Benjamin Peterson | 2016-01-01 | 6 | -6/+6 |
| | | |||||
* | | fix reordering | Benjamin Peterson | 2015-12-05 | 1 | -4/+4 |
| | | |||||
* | | merge 3.2 | Benjamin Peterson | 2015-12-05 | 1 | -3/+4 |
|\ \ | |/ | |||||
| * | add CVE and issue number | Benjamin Peterson | 2015-12-05 | 1 | -2/+3 |
| | | |||||
* | | Issue #25021: Correctly make sure that product.__setstate__ does not access | Kristján Valur Jónsson | 2015-09-12 | 2 | -2/+20 |
| | | | | | | | | invalid memory. | ||||
* | | protect against mutation of the dict during insertion (closes #24407) | Benjamin Peterson | 2015-07-05 | 3 | -7/+36 |
| | | |||||
* | | add issue number | Benjamin Peterson | 2015-06-27 | 1 | -1/+1 |
| | | |||||
* | | use safe allocation and reallocation macros | Benjamin Peterson | 2015-06-27 | 2 | -16/+12 |
| | | |||||
* | | Issue 24366: Indent code (thanks to li4ick for reporting). | Yury Selivanov | 2015-06-02 | 1 | -1/+1 |
| | | |||||
* | | merge 3.2 | Benjamin Peterson | 2015-05-26 | 1 | -7/+3 |
|\ \ | |/ | |||||
| * | keep distutils version in sync with python version automatically | Benjamin Peterson | 2015-05-26 | 1 | -7/+3 |
| | | |||||
* | | merge 3.2 (#22931) | Benjamin Peterson | 2015-05-23 | 3 | -3/+19 |
|\ \ | |/ | |||||
| * | allow square brackets in cookie values (closes #22931) | Benjamin Peterson | 2015-05-23 | 3 | -3/+23 |
| | | |||||
* | | be more robust against the filters list changing under us (closes #24096) | Benjamin Peterson | 2015-05-03 | 3 | -6/+31 |
| | | |||||
* | | just sort the items tuple directly (closes #24094) | Benjamin Peterson | 2015-05-03 | 3 | -27/+25 |
| | | |||||
* | | merge 3.2 (#24044) | Benjamin Peterson | 2015-04-23 | 2 | -2/+7 |
|\ \ | |/ | |||||
| * | properly handle malloc failure (closes #24044) | Benjamin Peterson | 2015-04-23 | 2 | -2/+7 |
| | | | | | | | | Patch by Christian Heimes. | ||||
* | | Issue #23998: PyImport_ReInitLock() now checks for lock allocation error | Christian Heimes | 2015-04-19 | 2 | -1/+10 |
| | | |||||
* | | use PyMem_NEW to detect overflow (closes #23362) | Benjamin Peterson | 2015-03-02 | 1 | -1/+1 |
| | | |||||
* | | fix possible overflow bugs in unicodedata (closes #23367) | Benjamin Peterson | 2015-03-02 | 2 | -3/+12 |
| | | |||||
* | | merge 3.2 | Benjamin Peterson | 2015-02-18 | 3 | -424/+0 |
|\ \ | |/ | |||||
| * | remove RPM, since it's unused and unmaintained | Benjamin Peterson | 2015-02-18 | 3 | -424/+0 |
| | | |||||
| * | Issue #23055: Fixed read-past-the-end error in PyUnicode_FromFormatV. | Serhiy Storchaka | 2015-01-30 | 1 | -0/+2 |
| | | |||||
| * | Issue #23055: Fixed a buffer overflow in PyUnicode_FromFormatV. Analysis | Serhiy Storchaka | 2015-01-27 | 3 | -33/+161 |
| | | | | | | | | and fix by Guido Vranken. |