summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Python 3.10.7v3.10.7Pablo Galindo2022-09-0523-90/+237
|
* [3.10] gh-84095: Fill documentation gap regarding user-defined objects. ↵Vinay Sajip2022-09-051-1/+20
| | | | (GH-… (GH-96576)
* Docs: alphabetically order sqlite3.Cursor attrs (GH-96565)Miss Islington (bot)2022-09-041-30/+31
| | | | | (cherry picked from commit 9e5568578234f0ecd003247c8a2deaeb69976b4b) Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
* [3.10] gh-95778: Correctly pre-check for int-to-str conversion (GH-96537) ↵Gregory P. Smith2022-09-044-7/+107
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (#96563) Converting a large enough `int` to a decimal string raises `ValueError` as expected. However, the raise comes _after_ the quadratic-time base-conversion algorithm has run to completion. For effective DOS prevention, we need some kind of check before entering the quadratic-time loop. Oops! =) The quick fix: essentially we catch _most_ values that exceed the threshold up front. Those that slip through will still be on the small side (read: sufficiently fast), and will get caught by the existing check so that the limit remains exact. The justification for the current check. The C code check is: ```c max_str_digits / (3 * PyLong_SHIFT) <= (size_a - 11) / 10 ``` In GitHub markdown math-speak, writing $M$ for `max_str_digits`, $L$ for `PyLong_SHIFT` and $s$ for `size_a`, that check is: $$\left\lfloor\frac{M}{3L}\right\rfloor \le \left\lfloor\frac{s - 11}{10}\right\rfloor$$ From this it follows that $$\frac{M}{3L} < \frac{s-1}{10}$$ hence that $$\frac{L(s-1)}{M} > \frac{10}{3} > \log_2(10).$$ So $$2^{L(s-1)} > 10^M.$$ But our input integer $a$ satisfies $|a| \ge 2^{L(s-1)}$, so $|a|$ is larger than $10^M$. This shows that we don't accidentally capture anything _below_ the intended limit in the check. <!-- gh-issue-number: gh-95778 --> * Issue: gh-95778 <!-- /gh-issue-number --> Co-authored-by: Gregory P. Smith [Google LLC] <greg@krypto.org> (cherry picked from commit b126196838bbaf5f4d35120e0e6bcde435b0b480) Co-authored-by: Mark Dickinson <dickinsm@gmail.com>
* gh-68163: Correct conversion of Rational instances to float (GH-25619) ↵Miss Islington (bot)2022-09-044-4/+36
| | | | | | | | | | | | (GH-96557) * gh-68163: Correct conversion of Rational instances to float Also document that numerator/denominator properties are instances of Integral. Co-authored-by: Mark Dickinson <dickinsm@gmail.com> (cherry picked from commit 8464b754c4168586b99e2135ccd2567e025625a9) Co-authored-by: Sergey B Kirpichev <skirpichev@gmail.com>
* gh-95778: remove unneeded doc note on float.as_integer_ratio (GH-96553)Miss Islington (bot)2022-09-041-7/+0
| | | | | | Per mdickinson@'s comment on the main branch PR. (cherry picked from commit 69bb83c2bf254f92491d527ccec1ff41897add56) Co-authored-by: Gregory P. Smith <greg@krypto.org>
* doc typo: spell limitation (GH-96542)Miss Islington (bot)2022-09-041-1/+1
| | | | | (cherry picked from commit af6359dd5c5e20adec12501aaa6074716c316e41) Co-authored-by: Mehrdad Moradizadeh <mhrddmoradii@gmail.com>
* [3.10] gh-90195: Unset logger disabled flag when configuring it. (GH-96530) ↵Vinay Sajip2022-09-032-2/+33
| | | | (GH-96533)
* [3.10] gh-89087: Update logging.QueueHandler documentation to clarify ↵Miss Islington (bot)2022-09-031-0/+14
| | | | record… (GH-96527) (GH-96529)
* gh-75500: Update idlelib/help.html (GH-96523)Miss Islington (bot)2022-09-031-7/+8
| | | | | (cherry picked from commit 837ce6460d6554e9d7a847951ca5108ac6926ee5) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>
* bpo-30419: DOC: Update missing information in bdb docs (GH-1687)Miss Islington (bot)2022-09-022-65/+133
| | | | | | | | Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com> Co-authored-by: Martin Panter <vadmium@users.noreply.github.com> Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> (cherry picked from commit ccce9b77e1f599e05425eadc0cc372d142fe05e0) Co-authored-by: Cheryl Sabella <cheryl.sabella@gmail.com>
* [3.10] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (#96501)Gregory P. Smith2022-09-0227-21/+780
| | | | | | | | | | | | | | | | | Integer to and from text conversions via CPython's bignum `int` type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of digits can consume several CPU seconds. This PR comes fresh from a pile of work done in our private PSRT security response team repo. This backports https://github.com/python/cpython/pull/96499 aka 511ca9452033ef95bc7d7fc404b8161068226002 Signed-off-by: Christian Heimes [Red Hat] <christian@python.org> Tons-of-polishing-up-by: Gregory P. Smith [Google] <greg@krypto.org> Reviews via the private PSRT repo via many others (see the NEWS entry in the PR). <!-- gh-issue-number: gh-95778 --> * Issue: gh-95778 <!-- /gh-issue-number --> I wrote up [a one pager for the release managers](https://docs.google.com/document/d/1KjuF_aXlzPUxTK4BMgezGJ2Pn7uevfX7g0_mvgHlL7Y/edit#).
* gh-96168: Improve sqlite3 dict_factory example (GH-96457)Miss Islington (bot)2022-09-011-18/+9
| | | | | | | Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM> Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com> (cherry picked from commit 91f40f3f78d6016a283989e32ec3d1fb61bcebca) Co-authored-by: Erlend E. Aasland <erlend.aasland@innova.no>
* [3.10] gh-96414: Inline code examples in sqlite3 docs (GH-96442). (#96453)Erlend E. Aasland2022-08-3114-283/+308
| | | | | | * [3.10] gh-96414: Inline code examples in sqlite3 docs (GH-96442). (cherry picked from commit f7e7bf161aaec5a5cffdcec7c97e1f09e445421b) Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
* Docs: normalise sqlite3 placeholder how-to heading (GH-96413)Miss Islington (bot)2022-08-301-2/+2
| | | | | (cherry picked from commit 7b01ce7953c0e24aa7aeaf207216fc9e7aefd18a) Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
* Docs: Improve clarity for bytes.hex() (GH-95257)Miss Islington (bot)2022-08-301-3/+4
| | | | | (cherry picked from commit 860fa351452de1502da12ec6f027d3f72dfc309f) Co-authored-by: Tim Burke <tim.burke@gmail.com>
* [3.10] Clean up junk & fix typo in 3.10.6 release notes (#95997)Marti Raudsepp2022-08-301-6/+1
|
* [3.10] gh-91305: Add a note about DatagramHandler and DNS latency. ↵Miss Islington (bot)2022-08-301-0/+7
| | | | (GH-96380) (GH-96400)
* Doc: Update Py_TPFLAGS_HAVE_FINALIZE in docs (GH-96273)Miss Islington (bot)2022-08-301-3/+6
| | | | | | It is now deprecated and the docs should reflect that. (cherry picked from commit 9625de6fab4597bcd04ec390b680b053b0533816) Co-authored-by: da-woods <dw-git@d-woods.co.uk>
* [3.10] Docs: normalize SQL style in sqlite3 docs (GH-96403). (#96409)Erlend E. Aasland2022-08-301-6/+6
| | | | | (cherry picked from commit 6d403e264a7dcd1544a91708f139c6dd8612204d) Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
* gh-95231: Disable md5 & crypt modules if FIPS is enabled (GH-94742)Miss Islington (bot)2022-08-302-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | If kernel fips is enabled, we get permission error upon doing `import crypt`. So, if kernel fips is enabled, disable the unallowed hashing methods. Python 3.9.1 (default, May 10 2022, 11:36:26) [GCC 10.2.0] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import crypt Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib/python3.9/crypt.py", line 117, in <module> _add_method('MD5', '1', 8, 34) File "/usr/lib/python3.9/crypt.py", line 94, in _add_method result = crypt('', salt) File "/usr/lib/python3.9/crypt.py", line 82, in crypt return _crypt.crypt(word, salt) PermissionError: [Errno 1] Operation not permitted Signed-off-by: Shreenidhi Shedi <sshedi@vmware.com> (cherry picked from commit 2fa03b1b0708d5d74630c351ec9abd2aac7550da) Co-authored-by: Shreenidhi Shedi <53473811+sshedi@users.noreply.github.com>
* [3.10] gh-94682: Build and test with OpenSSL 1.1.1q (gh-94683) (gh-96391)Christian Heimes2022-08-299-19/+26
| | | Co-authored-by: Christian Heimes <christian@python.org>
* [3.10] gh-95432: Add doctests for the sqlite3 docs (GH-96225) (#96379)Erlend E. Aasland2022-08-292-48/+91
| | | | | | | | | | As a consequence of the added test, this commit also includes fixes for broken examples. - Add separate namespace for trace tests bco. module level callback - Move more backup and cursor examples under separate namespaces. (cherry picked from commit bf9259776dff5348bc854983409ea68618c1f174) Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
* GH-96359: Fix docs that claim int(0|1) doesn't match False (GH-96361)Miss Islington (bot)2022-08-291-1/+1
| | | | | (cherry picked from commit 3d3a86ed40626471b2c9e7f1336b228eb0dd0879) Co-authored-by: Jonathan Oberländer <github@l3vi.de>
* [3.10] gh-96191: Update the configure file to use GitHub issue (gh-96211) ↵Dong-hee Na2022-08-292-15/+15
| | | | (gh-96376)
* gh-95950: Add a test for both `csv.Dialect` and `kwargs` (GH-95951)Miss Islington (bot)2022-08-291-0/+28
| | | | | (cherry picked from commit 1c01bd28a0ec7e46e570a07d970c590b1809f8f1) Co-authored-by: Nikita Sobolev <mail@sobolevn.me>
* [3.10] gh-95994: Clarify escaped newlines. (GH-96066) (#96360)Ezio Melotti2022-08-281-11/+21
| | | | | | | | | | | | | | | | * gh-95994: clarify escaped newlines. * Rephrase ambiguous sentence. Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM> * Use `<newline>` in escape sequences table. Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM> Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>. (cherry picked from commit c3d591fd0699605c8253beda2372114052a7bdba) Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>
* gh-96021: Explicitly tear down the IsolatedAsyncioTestCase loop in tests ↵Miss Islington (bot)2022-08-281-2/+7
| | | | | | | | | | | | (GH-96135) (GH-96235) Tests for IsolatedAsyncioTestCase.debug() rely on the runner be closed in __del__. It makes tests depending on the GC an unreliable on other implementations. It is better to tear down the loop explicitly even if currently there is no a public API for this. (cherry picked from commit 4de06e3cc0a58d73934f9a2759ad9cd2f6b031b0) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.10] gh-89047: Fix msecs computation so you never end up with 1000 msecs. ↵Miss Islington (bot)2022-08-272-1/+9
| | | | (GH-96340) (GH-96342)
* [3.10] gh-92007: Handle elevation errors in NTEventLogHandler more grace… ↵Miss Islington (bot)2022-08-271-1/+10
| | | | (GH-96322) (GH-96338)
* [3.10] gh-77116: Add SMTP buffering example to logging cookbook. (GH-96324) ↵Miss Islington (bot)2022-08-271-0/+82
| | | | (GH-96325)
* fixes gh-96292: Fix Trivial Typo in cpython/Modules/atexitmodule.c (GH-96327)Miss Islington (bot)2022-08-271-1/+1
| | | | | (cherry picked from commit 0ace820bec8892d621a4aadc1feb6c56e25560bf) Co-authored-by: Ansab Gillani <56605828+ansabgillani@users.noreply.github.com>
* fix threading.Event.isSet() docstring (GH-96297)Miss Islington (bot)2022-08-271-1/+1
| | | | | | fixes gh-96296 (cherry picked from commit e53444051018af3351cc26c4bf1ed2d380292016) Co-authored-by: Daniel Giger <danielg3432@gmail.com>
* gh-96197: Define the behavior of repr if sys.displayhook is lost (gh-96242)Miss Islington (bot)2022-08-261-0/+2
| | | | | (cherry picked from commit 0319cd6825f3c247a875c91493a38992fb33a5b3) Co-authored-by: Dong-hee Na <donghee.na@python.org>
* gh-96197: Fix expression when :func:`sys.breakpointhook is missing (gh-96293)Miss Islington (bot)2022-08-261-1/+1
| | | | | (cherry picked from commit 47d406ffc4946b023e38322c5235bec25f068481) Co-authored-by: Dong-hee Na <donghee.na@python.org>
* bpo-46744: Support "-Win32" and make platform flags case insensitive in ↵Steve Dower2022-08-252-28/+30
| | | | | Windows build scripts. (GH-31803) Co-authored-by: conioh <10606081+conioh@users.noreply.github.com>
* Clarify API stability of PyTypeObject in relation to static types. (GH-96217)Miss Islington (bot)2022-08-251-3/+3
| | | | | | | | | | Fixes: https://github.com/python/cpython/issues/95300 Related: https://github.com/python/cpython/issues/91271 (cherry picked from commit caa2a9799a47294441e4206037620322eea9ed06) Co-authored-by: ov2k <ov2k.github@gmail.com>
* [3.10] gh-91070: Add note about SysLogHandler on macOS 12.x (Monterey). ↵Miss Islington (bot)2022-08-251-0/+6
| | | | (GH-94803) (GH-96261)
* gh-95243: Mitigate the race condition in testSockName (GH-96173)Miss Islington (bot)2022-08-252-2/+16
| | | | | | | | | | | find_unused_port() has an inherent race condition, but we can't use bind_port() as that uses .getsockname() which this test is exercising. Try binding to unused ports a few times before failing. Signed-off-by: Ross Burton <ross.burton@arm.com> (cherry picked from commit df110126971d0271a977ce10779083b3e335b4da) Co-authored-by: Ross Burton <ross.burton@arm.com>
* GH-96179: Fix misleading example on the bisect documentation (GH-96228)Miss Islington (bot)2022-08-242-1/+2
| | | | | | The `movies[bisect(movies, 1960, key=by_year)]` will actually return only movies **after** 1960. (cherry picked from commit 4317b25a2323ae4be04574e45de0e335c571c463) Co-authored-by: prego <pedropregueiro@gmail.com>
* gh-96197: Define the behavior of breakpoint if sys.breakpointhook is lost ↵Miss Islington (bot)2022-08-241-0/+2
| | | | | | | (gh-96231) (cherry picked from commit 09563a764ebc54f98087c128419f46cf0822b4b7) Co-authored-by: Dong-hee Na <donghee.na@python.org>
* [3.10] gh-94635: Frame sqlite3 how-to headings as such & move default ↵Erlend E. Aasland2022-08-241-43/+45
| | | | | | | | | adapters to reference (GH-96136) (#96227) Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com> Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>. (cherry picked from commit 6bda5b85b53443f3467865fbf85cbe72932e7cd6) Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>
* [3.10] GH-96071: add regression test for GH-96071 (GH-96137) (#96205)Kumar Aditya2022-08-231-0/+14
| | | Co-authored-by: Kumar Aditya <59607654+kumaraditya303@users.noreply.github.com>
* gh-96175: add missing self._localName assignment in `xml.dom.minidom.Attr` ↵Miss Islington (bot)2022-08-233-1/+18
| | | | | | | | | | (GH-96176) X-Ref: https://github.com/python/typeshed/pull/8590GH-discussion_r951473977 Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com> (cherry picked from commit 58f6953d6d3fe20d972bfa2f6e982206adcf1353) Co-authored-by: Kevin Kirsche <Kev.Kirsche+GitHub@gmail.com>
* [3.10] GH-96187: Prevent _PyCode_GetExtra to return garbage for negative ↵Pablo Galindo Salgado2022-08-232-1/+3
| | | | | | | indexes (GH-96188). (#96210) (cherry picked from commit 16ebae4cd4029205d932751f26c719c6cb8a6e92) Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
* [3.10] GH--93592: Fix frame chain when throwing exceptions into coroutines ↵Kristján Valur Jónsson2022-08-233-4/+35
| | | | (GH-95207)
* [3.10] gh-96159: Fix significant performance degradation in ↵Miss Islington (bot)2022-08-232-3/+8
| | | | | logging.TimedRotat… (GH-96182) (GH-96195) Co-authored-by: Duncan Grisby <duncan-github@grisby.org>
* gh-96096: Add undocumented SQLITE_OK/DENY/IGNORE sqlite3 constants (GH-96134)Miss Islington (bot)2022-08-231-4/+14
| | | | | | | Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com> Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com> (cherry picked from commit d6259c58cbb48b8f3fbd70047f004ea19fe91e86) Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>
* gh-95432: Add doctest for sqlite3 tutorial (GH-96193)Miss Islington (bot)2022-08-231-16/+47
| | | | | (cherry picked from commit 04c73e5efbfea8ae9da5bd518cee96086017ef4f) Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
* gh-96121: Merge sqlite3.Row examples into sqlite3.Row class doc (GH-96122)Miss Islington (bot)2022-08-222-70/+18
| | | | | | | Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com> Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM> (cherry picked from commit 18b1782192f85bd26db89f5bc850f8bee4247c1a) Co-authored-by: Erlend E. Aasland <erlend.aasland@innova.no>