| Commit message (Collapse) | Author | Age | Files | Lines |
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
`os.path.realpath(strict='allow_missing')` (GH-135037) (GH-135064)
Addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517.
(cherry picked from commit 3612d8f51741b11f36f8fb0494d79086bac9390a)
Co-authored-by: Łukasz Langa <lukasz@langa.pl>
Signed-off-by: Łukasz Langa <lukasz@langa.pl>
Co-authored-by: Petr Viktorin <encukou@gmail.com>
Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(GH-128606) (GH-135077) (#135083)
[3.14] gh-128605: Add branch protections for x86_64 in asm_trampoline.S (GH-128606) (GH-135077)
Apply Intel Control-flow Technology for x86-64 on asm_trampoline.S.
Required for mitigation against return-oriented programming (ROP)
and Call or Jump Oriented Programming (COP/JOP) attacks.
Manual application is required for the assembly files.
See also: https://sourceware.org/annobin/annobin.html/Test-cf-protection.html
(cherry picked from commit 899cca6dbf76bf3e06a99f60a5f996ad6ba0761f)
Co-authored-by: stratakis <cstratak@redhat.com>
|
| |
|
|
|
|
|
|
| |
(gh-135054)
gh-134875: Fix mimallc build error for the old compilers (gh-134994)
(cherry picked from commit b525e31b7fc50e7a498f8b9b16437cb7b9656f6f)
Co-authored-by: Donghee Na <donghee.na@python.org>
|
| |
|
|
|
|
|
|
| |
(gh-134575) (GH-135047)
50 producer and 50 consumer threads need more than 5GB of memory.
(cherry picked from commit 7a79f52d83c22f5a9787e590f267325c1175d389)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
|
| |
|
|
|
|
|
| |
(GH-134963) (GH-135049)
(cherry picked from commit e814f43f2c655b931af8ee9e1c128bd1027549fb)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
|
| |
|
|
|
|
|
| |
(GH-133658) (GH-134965)
random.getrandbits() can now generate more that 2**31 bits.
random.randbytes() can now generate more that 256 MiB.
(cherry picked from commit 68784fed78aa297f0de0d038742495709185bef5)
|
| |
|
|
|
|
|
|
|
| |
(gh-134910) (gh-135040)
The `textiowrapper_iternext` function called `_textiowrapper_writeflush`, but did not
use a critical section, making it racy in free-threaded builds.
(cherry picked from commit 44fb7c361cb24dcf9989a7a1cfee4f6aad5c81aa)
Co-authored-by: Duane Griffin <duaneg@dghda.com>
|
| |
|
|
|
| |
candidates for suggestions (gh-131001) (gh-135020)
Co-authored-by: Łukasz Langa <lukasz@langa.pl>
|
| |
|
|
|
|
|
|
| |
`socket.{send,recv}_fds` (GH-134960) (#135017)
This amends commit e3b6ff19aaa318a813130ba9ad2ab0a332f27feb.
(cherry picked from commit 128195e12eb6d5b9542558453df7045dd7aa1e15)
Co-authored-by: GalaxySnail <me@glxys.nl>
|
| |
|
|
|
|
|
| |
gh-133503: clarify `compileall -s/-p` docs (GH-134756)
(cherry picked from commit fe6f8a3619242b287a793a5b5d8645f402482c71)
Co-authored-by: Rihaan Meher <meherrihaan@gmail.com>
Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
|
| |
|
|
|
|
|
|
|
|
| |
AC signatures (GH-134713) (#134962)
OpenSSL and HACL*-based hash functions constructors now support both `data` and `string` parameters.
Previously these constructor functions inconsistently supported sometimes `data` and sometimes `string`,
while the documentation expected `data` to be given in all cases.
(cherry picked from commit c6e63d9d351f6d952000ec3bf84b3a7607989f92)
(cherry picked from commit 379d0bc95646dfe923e7ea05fb7f1befbd85572d)
|
| |
|
|
|
|
|
|
|
|
| |
(#134985)
gh-134835: Remove outdated list from `howto/urllib2.rst` (GH-134844)
:teapot:
(cherry picked from commit 3704171415c1ea6ebbeb2f992758b6565f42e378)
Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(GH-134955) (#134981)
gh-134954: Hard-cap max file descriptors in subprocess test fd_status (GH-134955)
* Hard-cap max file descriptors in subprocess test fd_status
On some systems, `SC_OPEN_MAX` may return a very large value (i.e. 10**30), leading to the subprocess test timing out (or run forever).
Prevent this situation by applying a hard cap on how many file descriptors are checked.
* Fix typo in usage docstring
s/fd_stats/fd_status/
(cherry picked from commit f58873e4b2b7aad8e3a08a6188c6eb08d0a3001b)
Co-authored-by: Itamar Oren <itamarost@gmail.com>
|
| |
|
|
|
|
|
| |
(GH-134967)
(cherry picked from commit 3c66e5976669a599adfb260514c03815b1a9e4e9)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
|
| |
|
|
|
|
|
|
| |
"remaining" (GH-126921) (#134914)
GH-106235: Clarify `parse_known_args` documentation by removing "remaining" (GH-126921)
(cherry picked from commit a4251411a97304ab001721c6231d86ddf4eac3f0)
Co-authored-by: Savannah Bailey <savannahostrowski@gmail.com>
|
| | |
|
| |
|
|
|
|
|
|
| |
(GH-134925) (GH-134941)
Optional None values are always omitted.
(cherry picked from commit 1a89991d2362867a9127e151376135615bc92a4c)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
|
| |
|
|
|
| |
(GH-134936)
(cherry picked from commit cc344e8dd0a6fdc83a032c229f9b3cf53f76a887)
|
| |
|
| |
(cherry picked from commit b367e27af9b52528e395f95b277ec7b69e98e287)
|
| |
|
|
|
|
|
|
|
|
|
| |
Contrary to the current docs, ast.Constant will never hold containers
such as frozenset or tuple; the Python parser only emits it for simple
literals.
For precision, add the exact list of types that may be contained in an
ast.Constant.
(cherry picked from commit 381020d41fb1f8b33421f01c609ba0d0edb99764)
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
|
| |
|
|
|
|
|
| |
(GH-134213) (GH-134884)
(cherry picked from commit 4109a9c6b33faa0032ffc95d96cd0db482af3ce2)
Co-authored-by: Petr Viktorin <encukou@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
(GH-132858) (GH-134882)
This adds a warning about the possibly-missing NUL terminator, but in a way
that doesn't make it sound like a bug/wart.
(cherry picked from commit b783e1791b2076ef560104f8207156d75859c0a6)
Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
|
| |
|
|
|
| |
(cherry picked from commit e9d845b41dca9ad84b76ef777d05e647a4b4d8cd)
Co-authored-by: Emma Smith <emma@emmatyping.dev>
|
| |
|
|
|
|
| |
Test the error and failure report in more detail.
(cherry picked from commit f6324bc7eedc615c3c961fe368a8c56697d42936)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
|
| |
|
|
|
|
|
|
| |
(#134854)
GH-134848: Use a set to store ``AuditEvents.sources`` (GH-134849)
(cherry picked from commit b265a7ddeb12b2040d80b471d447ce4c3ff4bb95)
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
(GH-134841) (#134852)
gh-133711: Fix test_readline.test_nonascii() for UTF-8 Mode (GH-134841)
Skip the test if the Python UTF-8 Mode is enabled and the LC_CTYPE
encoding is not UTF-8.
(cherry picked from commit 4635115c3f1495fa20e553937df37861fffa7054)
Co-authored-by: Victor Stinner <vstinner@python.org>
|
| |
|
|
|
|
|
|
| |
(GH-134836) (#134846)
gh-128840: Fix parsing long IPv6 addresses with embedded IPv4 address (GH-134836)
(cherry picked from commit d83576bf48d07d5e29d5d171c4e25afb048622aa)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
gh-133711: Fix test_regrtest for PYTHONUTF8=1 (GH-134839)
Use "backslashreplace" error handler to decode stdout and stderr.
Example:
vstinner@WIN C:\victor\python\main\build\test_python_worker_8360\x91>
"C:\victor\python\main\PCbuild\amd64\python_d.exe" -m test
--fast-ci --slow-ci --testdir
C:\Users\vstinner\AppData\Local\Temp\tmp0t59e8da
test_regrtest_noop1 test_regrtest_noop2 test_regrtest_noop3
test_regrtest_noop4
Notice the "\x91" byte at the end of the first line: it's the
non-ASCII U+00E6 character encoded to the OEM cp437 code page.
(cherry picked from commit 91618278e7cd1ffc222efa03bb5334bd5a13dc5b)
Co-authored-by: Victor Stinner <vstinner@python.org>
|
| |
|
|
|
| |
(GH-134818) (GH-134824)
(cherry picked from commit 7be5916f6dc3db95744b5fec945327d82cce0183)
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
[3.14] gh-134744: Fix fcntl error handling (GH-134748) (GH-134795)
gh-134744: Fix fcntl error handling (GH-134748)
Fix also reference leak on buffer overflow.
(cherry picked from commit 8a6a6f39c869a6601babc31592e156ce22478a47)
(cherry picked from commit 9300a596d37d058e6e58d00a2ad70617c863a3de)
Co-authored-by: Victor Stinner <vstinner@python.org>
|
| |
|
|
|
|
|
| |
gh-134160: Block multiple module initialization (GH-134773)
(cherry picked from commit 469a56470b1d8df03862d8ceb73aebca14772dcf)
Co-authored-by: Petr Viktorin <encukou@gmail.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
|
| |
|
|
|
|
|
|
|
| |
(#134826)
Update outdated statement from `math` about C standard (GH-134621)
(cherry picked from commit 21672b694bd1786bad6eb71a9eff89291a91554b)
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Co-authored-by: Adam Turner <9087854+aa-turner@users.noreply.github.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
(GH-134804) (#134809)
gh-134789: Document del s[i] operation for mutable sequences (GH-134804)
[main] Update stdtypes.rst
- Added explicit mention of `del s[i]` (item deletion by index) to the Mutable Sequence Types section.
- Clarified that this operation removes the item at the specified index from the sequence.
- Addresses issue GH-134789.
(cherry picked from commit 967f361993c9c97eb3ff3076a409b78ea32938df)
Co-authored-by: Rishabh Singh <67859818+rishabh11336@users.noreply.github.com>
|
| | |
|
| |
|
|
|
|
|
|
| |
gh-133678: Document C API third party tools (GH-134526)
(cherry picked from commit c3c88064f5905889057dcdfaaaa4a48f8e2d53d4)
Co-authored-by: Victor Stinner <vstinner@python.org>
Co-authored-by: Petr Viktorin <encukou@gmail.com>
Co-authored-by: Steve Dower <steve.dower@python.org>
|
| |
|
|
| |
(backport of GH-134778) (GH-134788)
|
| |
|
|
|
|
| |
(GH-134730) (#134787)
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
|
| |
|
| |
(cherry picked from commit 51762b6cadb8f316dd783716bc5c168c2e2d07f0)
|
| |
|
|
|
|
|
|
| |
`asyncio.start_unix_server` (GH-134750) (#134780)
gh-134664: document `cleanup_socket` parameter in `asyncio.start_unix_server` (GH-134750)
(cherry picked from commit 92ea1eb38ff97ac046a0031d505c30a51f58a43f)
Co-authored-by: Shamil <ashm.tech@proton.me>
|
| |
|
|
|
|
|
|
|
| |
(#134754)
gh-134160: Use multi-phase init in documentation examples (GH-134296)
(cherry picked from commit 96905bdd273d2e5724d2c1b6b0f95ecb0daeaabe)
Co-authored-by: neonene <53406459+neonene@users.noreply.github.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
|
| |
|
|
|
|
|
|
| |
(#134700)
gh-134559: Add versionadded for ``object.__replace__()`` (GH-134672)
(cherry picked from commit 71290a6fbe79cef3773a3af6fcf08d8bf15c8460)
Co-authored-by: tmlnv <108088921+tmlnv@users.noreply.github.com>
|
| |
|
|
|
|
| |
_get_ptext_to_endchars (GH-134233) (#134677)
Co-authored-by: R. David Murray <rdmurray@bitdance.com>
|
| |
|
|
|
|
|
|
|
| |
* gh-132876: workaround broken ldexp() on Windows 10
ldexp() fails to round subnormal results before Windows 11,
so hide their bug.
(cherry picked from commit cf8941c60356acdd00055e5583a2d64761c34af4)
Co-authored-by: Tim Peters <tim.peters@gmail.com>
|
| |
|
|
|
|
| |
Fix sphinx-lint warnings (default-role used). (GH-134647)
(cherry picked from commit 24a47155d2172966fab7d56f2bf9181056fba8d0)
Co-authored-by: Julien Palard <julien@palard.fr>
|
| |
|
|
|
|
| |
(#134623)
Co-authored-by: Jasper Wong <111284156+3willows@users.noreply.github.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
platforms (GH-134462) (#134620)
gh-80334: fix multiprocessing.freeze_support for other spawn platforms (GH-134462)
Doc/library/multiprocessing.rst: freeze_support: Change to specify spawn method instead of platform
Have multiprocessing.freeze_support() enable on spawn, not just win32.
---------
(cherry picked from commit 80284b5c5eebd0e603c38322f94a97a2853ceeba)
Co-authored-by: Eddy Mulyono <eddymul@gmail.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(GH-128841) (#134611)
gh-128840: Limit the number of parts in IPv6 address parsing (GH-128841)
GH-128840: Limit the number of parts in IPv6 address parsing
Limit length of IP address string to 39
---------
(cherry picked from commit 47f1161d3a2bec52b5b5e952150141709c247da2)
Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
|
| |
|
|
|
|
|
| |
after fork (gh-134514) (gh-134597)
(cherry picked from commit 9a2346df861f26d5f8d054ad2f9c37134dee3822)
Co-authored-by: Jiucheng(Oliver) <git.jiucheng@gmail.com>
|
| |
|
| |
(cherry picked from commit 77eade39f972a4f3d8e9fec00288779f35ceee21)
|