summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* bpo-40146: Update OpenSSL to 1.1.1f in Azure Pipelines (GH-19288)Victor Stinner2020-04-023-4/+5
|
* bpo-39503: CVE-2020-8492: Fix AbstractBasicAuthHandler (GH-18284)Victor Stinner2020-04-024-52/+115
| | | | | | | | | | | | | The AbstractBasicAuthHandler class of the urllib.request module uses an inefficient regular expression which can be exploited by an attacker to cause a denial of service. Fix the regex to prevent the catastrophic backtracking. Vulnerability reported by Ben Caller and Matt Schwager. AbstractBasicAuthHandler of urllib.request now parses all WWW-Authenticate HTTP headers and accepts multiple challenges per header: use the realm of the first Basic challenge. Co-Authored-By: Serhiy Storchaka <storchaka@gmail.com>
* bpo-40094: mailcap.test() uses waitstatus_to_exitcode() (GH-19287)Victor Stinner2020-04-021-0/+1
| | | | mailcap.test() now uses os.waitstatus_to_exitcode() to convert os.system() exit status into an exit code.
* bpo-40141: Add line and column information to ast.keyword nodes (GH-19283)Pablo Galindo2020-04-016-8/+117
|
* bpo-40094: Add os.waitstatus_to_exitcode() (GH-19201)Victor Stinner2020-04-0118-61/+258
| | | | | | | | | | | | | | Add os.waitstatus_to_exitcode() function to convert a wait status to an exitcode. Suggest waitstatus_to_exitcode() usage in the documentation when appropriate. Use waitstatus_to_exitcode() in: * multiprocessing, os, subprocess and _bootsubprocess modules; * test.support.wait_process(); * setup.py: run_command(); * and many tests.
* bpo-38527: fix configure script for Solaris (GH-16845)Arnon Yaari2020-04-013-4/+6
| | | | | On Solaris, the regular "grep" command may be an old version that fails to search a binary file. We need to use the correct command (ggrep, in our case), which is found by the configure script earlier. Automerge-Triggered-By: @pablogsal
* bpo-40071: Fix potential crash in _functoolsmodule.c (GH-19273)Paulo Henrique Silva2020-04-011-1/+4
| | | | | | | | | | | | | | | | | Changes on 7dd549eb0893 made _functools compatible with PEP-489 and we could have multiple modules instances loaded. But, right now there is no way to make `kwd_mark` global into a per module instance variable. kwd_mark is used on lru_cache_new which does not have a reference to a PyModule*, necessary to use PyModule_GetState. PEP-573 will solve this problem and will allow us to move the global state to per-module data and properly clear the state when unloading a module instance. This change temporarily disable cleaning of kwd_mark to avoid NULL pointer dereference if we clear kwd_mark and other module instances still alive use it.
* bpo-39682: make `pathlib.Path` immutable by removing (undocumented) support ↵Barney Gale2020-04-013-49/+21
| | | | | | for "closing" a path by using it as a context manager (GH-18846) Support for using a path as a context manager remains, and is now a no-op.
* bpo-33262: Deprecate passing None for `s` to shlex.split() (GH-6514)Zackery Spytz2020-04-015-1/+18
| | | | | | | | | * bpo-33262: Deprecate passing None for `s` to shlex.split() This reads the string to split from standard input. * Update What's New. * Fix shlex.rst
* bpo-40094: Enhance os.WIFEXITED documentation (GH-19244)Victor Stinner2020-04-011-10/+24
|
* bpo-40130: _PyUnicode_AsKind() should not be exported. (GH-19265)Serhiy Storchaka2020-04-012-55/+46
| | | | | Make it a static function, and pass known attributes (kind, data, length) instead of the PyUnicode object.
* bpo-40121: Fix exception type in test (GH-19267)Steve Dower2020-04-011-1/+1
|
* Handle when IOCTL_VM_SOCKETS_GET_LOCAL_CID does not exist in "socket" (GH-19270)Pablo Galindo2020-04-011-0/+2
| | | | | | | Running `test_socket` or anything that depends on it (like python -m test.pythoninfo) crashes if IOCTL_VM_SOCKETS_GET_LOCAL_CID does not exist in the socket module. Automerge-Triggered-By: @pablogsal
* bpo-40094: Add missing import to wait_process() (GH-19268)Victor Stinner2020-04-011-0/+2
|
* bpo-40094: Add run_command() to setup.py (GH-19266)Victor Stinner2020-03-311-16/+22
|
* bpo-31160: Fix race condition in test_os.PtyTests (GH-19263)Victor Stinner2020-03-311-2/+9
| | | | bpo-31160, bpo-40094: Wait until the process completes before closing the PTY to prevent sending SIGHUP to the child process.
* bpo-40094: Add _bootsubprocess._waitstatus_to_exitcode (GH-19264)Victor Stinner2020-03-311-11/+15
| | | | | | | * Add _waitstatus_to_exitcode() helper function to _bootsubprocess. * Enhance check_output() error message if the command fails. _bootsubprocess no longer handles WIFSTOPPED() case: it now raises a ValueError.
* bpo-39943: Clean up marshal.c. (GH-19236)Serhiy Storchaka2020-03-311-57/+31
| | | | | | * Add consts. * Remove redundant casts and checks. * Use concrete C API macros. * Avoid raising and silencing OverflowError for ints.
* bpo-40094: Enhance threading tests (GH-19260)Victor Stinner2020-03-312-31/+39
| | | | | | | * Rewrite test_thread.test_forkinthread() to use support.wait_process() and wait for the child process in the main thread, not in the spawned thread. * test_threading now uses support.wait_process() and checks the child process exit code to detect crashes.
* bpo-40094: Enhance fork and wait tests (GH-19259)Victor Stinner2020-03-314-24/+15
| | | | | | * test_fork1: remove duplicated wait_impl() method: reuse fork_wait.py implementation instead. * Use exit code different than 0 to ensure that we executed the expected code path.
* bpo-40094: Add test.support.wait_process() (GH-19254)Victor Stinner2020-03-3119-103/+125
| | | | | | | | | Moreover, the following tests now check the child process exit code: * test_os.PtyTests * test_mailbox.test_lock_conflict() * test_tempfile.test_process_awareness() * test_uuid.testIssue8621() * multiprocessing resource tracker tests
* Document most common signals (GH-19245)Victor Stinner2020-03-312-1/+107
| | | | Document individual signals (only the most common signals): description, default action, availability.
* closes bpo-40125: Update multissltests.py to use OpenSSL 1.1.1f. (GH-19248)Benjamin Peterson2020-03-311-1/+1
|
* bpo-40003: test.bisect_cmd copies Python options (GH-19246)Victor Stinner2020-03-312-2/+17
| | | | | test.bisect_cmd now copies Python command line options like -O or -W. Moreover, emit a warning if test.bisect_cmd is used with -w/--verbose2 option.
* bpo-32591: _PyErr_WarnUnawaitedCoroutine() sets source (GH-19247)Victor Stinner2020-03-311-3/+20
| | | | | | | | The _PyErr_WarnUnawaitedCoroutine() fallback now also sets the coroutine object as the source of the warning, as done by the Python implementation warnings._warn_unawaited_coroutine(). Moreover, don't truncate the coroutine name: Python supports arbitrary string length to format the message.
* bpo-1635741: Port math module to multiphase initialization (GH-19243)Dong-hee Na2020-03-312-25/+34
|
* bpo-1635741: Port _uuid module to multiphase initialization (GH-19242)Dong-hee Na2020-03-312-19/+23
|
* bpo-40121: Fixes audit event raised on creating a new socket (GH-19238)Steve Dower2020-03-314-3/+39
|
* bpo-40108: Improve the error message in runpy when importing a module that ↵Pablo Galindo2020-03-313-0/+16
| | | | includes the extension (GH-19239)
* fix comma location in various places (GH-19233)Mathieu Dupuy2020-03-308-9/+9
|
* bpo-40020: Fix realloc leak on failure in growable_comment_array_add (GH-19083)Alexander Riccio2020-03-302-3/+6
| | | | | Fix a leak and subsequent crash in parsetok.c caused by realloc misuse on a rare codepath. Realloc returns a null pointer on failure, and then growable_comment_array_deallocate crashes later when it dereferences it.
* bpo-39943: Remove unnecessary casts in import.c that remove constness (GH-19209)Andy Lester2020-03-301-2/+2
|
* Fix bug in test_collections.py (#19221)Curtis Bucher2020-03-301-1/+2
| | | Test in TestChainMap() line 257 did not properly check union behavior.
* bpo-8901: Windows registry path is now ignored with the -E option (GH-18169)Zackery Spytz2020-03-303-2/+11
|
* bpo-40077: Convert _abc module to use PyType_FromSpec() (GH-19202)Dong-hee Na2020-03-302-31/+76
| | | | | | | Replace statically allocated types with heap allocated types: use PyType_FromSpec(). Add a module state to store the _abc_data_type. Add traverse, clear and free functions to the module.
* bpo-37207: Use vectorcall for list() (GH-18928)Petr Viktorin2020-03-302-0/+30
| | | | | | | Speed up calls to list() by using the PEP 590 vectorcall calling convention. Patch by Mark Shannon. Co-authored-by: Mark Shannon <mark@hotpy.org> Co-authored-by: Dong-hee Na <donghee.na92@gmail.com>
* bpo-39073: validate Address parts to disallow CRLF (#19007)Ashwin Ramaswami2020-03-303-0/+25
| | | Disallow CR or LF in email.headerregistry.Address arguments to guard against header injection attacks.
* bpo-40096: Support __attribute__((__noreturn__)) on xlc (GH-19204)Batuhan Taşkaya2020-03-291-0/+1
|
* bpo-40024: Update _elementtree to use PyModule_AddType() (GH-19205)Dong-hee Na2020-03-291-8/+14
|
* bpo-38002: Use False/True for IDLE pyshell bools (GH-19203)Terry Jan Reedy2020-03-281-13/+12
| | | | | | | Change 0/1 assignments to 'executing', 'canceled', 'reading', 'endoffile'. These are not used outside of pyshell. Other bools already use False/True. Add comment about int needed for Windows call. Remove self.more, unused in idlelib and code.InteractiveInterpreter. The latter uses 'more' as a local.
* bpo-40086: Update/fix test_etree test case in test_typing (GH-19189)Furkan Önder2020-03-281-4/+2
|
* bpo-36543: What's new: Document how to replace xml.etree.cElementTree (GH-19188)Miro Hrončok2020-03-271-1/+5
|
* bpo-39812: Remove daemon threads in concurrent.futures (GH-19149)Kyle Stanley2020-03-276-32/+99
| | | | | | Remove daemon threads from :mod:`concurrent.futures` by adding an internal `threading._register_atexit()`, which calls registered functions prior to joining all non-daemon threads. This allows for compatibility with subinterpreters, which don't support daemon threads.
* bpo-40045: Make "dunder" method documentation easier to locate (#19153)Javad Mokhtari2020-03-271-5/+5
| | | | | | | | | * issue 40045 * Update lexical_analysis.rst Make "dunder" method documentation easier(GH-19153) Co-authored-by: Joannah Nanjekye <33177550+nanjekyejoannah@users.noreply.github.com>
* bpo-40089: Fix threading._after_fork() (GH-19191)Victor Stinner2020-03-272-1/+12
| | | | | If fork was not called by a thread spawned by threading.Thread, threading._after_fork() now creates a _MainThread instance for _main_thread, instead of a _DummyThread instance.
* bpo-38237: Use divmod for positional arguments whatsnew example (GH-19171)Ammar Askar2020-03-271-5/+4
|
* bpo-38644: Use _PySys_Audit(): pass tstate explicitly (GH-19183)Victor Stinner2020-03-274-25/+31
| | | Add the dependency to tstate more explicit.
* bpo-40077: Convert _json module to use PyType_FromSpec() (GH-19177)Dong-hee Na2020-03-272-157/+131
| | | | | | | Replace statically allocated types with heap allocated types: use PyType_FromSpec(). Add a module state to store the Scanner and Encoder types. Add traverse, clear and free functions to the module.
* bpo-38644: Make tstate more explicit inside pystate.c (GH-19182)Victor Stinner2020-03-263-47/+67
| | | | Fix PyInterpreterState_New(): Don't call PyErr_SetString() when there is no current Python thread state (if tstate is NULL).
* bpo-38644: Pass tstate explicitly in signalmodule.c (GH-19184)Victor Stinner2020-03-263-65/+93
| | | | PyOS_InterruptOccurred() now checks _Py_ThreadCanHandleSignals() before checking if SIGINT is tripped.