| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
| |
Automerge-Triggered-By: GH:zware
(cherry picked from commit bef7b26f7229f8b7cde843118a7bc7e2b00f0372)
Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>
|
|
|
|
| |
(cherry picked from commit b045cdaf341f80b7d1e4804b932b6e415600c2e1)
Co-authored-by: Inada Naoki <songofacandy@gmail.com>
|
|
|
|
|
|
|
|
|
| |
There is an extra `s` in the singular word `method`.
Reported in docs mailing list by Steven Nguyen.
Automerge-Triggered-By: GH:Mariatta
(cherry picked from commit f193874056fb185305084b79b32d2745ce9be7cf)
Co-authored-by: Mariatta Wijaya <Mariatta@users.noreply.github.com>
|
|
|
|
|
|
| |
Skip the test if setlocale() fails.
(cherry picked from commit f3ab670fea75ebe177e3412a5ebe39263cd428e3)
Co-authored-by: Victor Stinner <vstinner@python.org>
|
|
|
|
|
|
|
| |
1. Bad IP masquerade rules can prevent startup.
2. X cannot handle some complex colored chars.
(cherry picked from commit 1b4a9c7956d5dc64f8002f62bf0faae2d1892f90)
Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>
|
|
|
|
|
| |
(cherry picked from commit 51a85ddce8b336addcb61b96f04c9c5edef07296)
Co-authored-by: Alex Prengère <2138730+alexprengere@users.noreply.github.com>
|
|
|
|
|
|
|
|
| |
Signed-off-by: Christian Heimes <christian@python.org>
Automerge-Triggered-By: GH:tiran.
(cherry picked from commit a54fc683f237d8f0b6e999a63aa9b8c0a45b7fef)
Co-authored-by: Christian Heimes <christian@python.org>
|
|
|
|
|
| |
(cherry picked from commit dfeec347f21b86879ba8f27f567bb275b243f1bc)
Co-authored-by: Zackery Spytz <zspytz@gmail.com>
|
|
|
|
|
| |
(cherry picked from commit 068ebf9729d440cef03e4c57e3db83c851146172)
Co-authored-by: Inada Naoki <songofacandy@gmail.com>
|
|
|
|
|
|
|
| |
sys.stderr (GH-25075)
(cherry picked from commit 09b90a037d18f5d4acdf1b14082e57bda78e85d3)
Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>
|
|
|
|
|
|
|
|
| |
This test checks result code of the connection directly, so it never raises an exception that can be suppressed by `support.transient_internet`. Directly support skipping the test in case of unreachable network.
(cherry picked from commit 29c451c6989c3c94fa0a9facf187c24f3cbf2420)
Co-authored-by: Carl Meyer <carl@oddbird.net>
Co-authored-by: Carl Meyer <carl@oddbird.net>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(GH-24906)
Python no longer fails at startup with a fatal error if a command
line argument contains an invalid Unicode character.
The Py_DecodeLocale() function now escapes byte sequences which would
be decoded as Unicode characters outside the [U+0000; U+10ffff]
range.
Use MAX_UNICODE constant in unicodeobject.c.
(cherry picked from commit 9976834f807ea63ca51bc4f89be457d734148682)
Co-authored-by: Victor Stinner <vstinner@python.org>
Co-authored-by: Victor Stinner <vstinner@python.org>
|
|
|
|
|
|
|
|
| |
curses.update_lines_cols() is only defined when the curses library
provides either resizeterm() or resize_term() functions which are optional
and are not provided on AIX.
(cherry picked from commit c8b5738810516df5722caf049003e9b319427bec)
Co-authored-by: Michael Felt <aixtools@users.noreply.github.com>
|
|
|
|
|
|
|
|
|
|
|
|
| |
reference cycles (GH-24995) (#25071)
Before: https://lists.es.python.org/pipermail/general/attachments/20201229/0c14bc58/attachment-0002.png
After: https://lists.es.python.org/pipermail/general/attachments/20201229/0c14bc58/attachment-0003.png
(cherry picked from commit 32430aadadf6e012e39167d3c18a24e49fb84874)
Co-authored-by: Jesús Cea <jcea@jcea.es>
Co-authored-by: Jesús Cea <jcea@jcea.es>
|
|
|
|
|
|
|
|
|
|
| |
CVE-2021-3426: Remove the "getfile" feature of the pydoc module which
could be abused to read arbitrary files on the disk (directory
traversal vulnerability). Moreover, even source code of Python
modules can contain sensitive data like passwords. Vulnerability
reported by David Schwörer.
(cherry picked from commit 9b999479c0022edfc9835a8a1f06e046f3881048)
Co-authored-by: Victor Stinner <vstinner@python.org>
|
|
|
|
|
|
|
|
|
|
| |
expressions (GH-25053) (GH-25056)
(cherry picked from commit fb1d01b9630b5069fe975f16e07a027d90b89434)
Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>
Automerge-Triggered-By: GH:ericvsmith
|
|
|
|
|
|
|
|
| |
(GH-25035)
Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit 5d6e8c1c1a5f667cdce99cb3c563ac922198678d)
Co-authored-by: Christian Heimes <christian@python.org>
|
|
|
|
|
| |
(cherry picked from commit a53e9a7cf5912a44c5143e353912e44cfcfca7dc)
Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>
|
|
|
|
|
|
|
|
| |
It doesn't actually affect whether match_hostname() is called (it
never is in this context any longer), but whether hostname
verification occurs in the first place.
(cherry picked from commit 9798cef92b882cd82a338d3368eaf3c4a32f5c2d)
Co-authored-by: Ville Skyttä <ville.skytta@iki.fi>
|
|
|
|
|
|
|
|
| |
GH-5030)
- removed ambiguous reference to os.sep from os.path.join() doc
(cherry picked from commit 21a2cabb3795f5170c746ab8f29e9d25c7442550)
Co-authored-by: Jared Sutton <jpsutton@gmail.com>
|
|
|
|
|
| |
(cherry picked from commit 76b5d714e4e2b9f3b63847325cba51d4c4dc36bc)
Co-authored-by: Brett Cannon <brett@python.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(GH-24957)
OpenSSL copies the internal message callback from SSL_CTX->msg_callback to
SSL->msg_callback. SSL_set_SSL_CTX() does not update SSL->msg_callback
to use the callback value of the new context.
PySSL_set_context() now resets the callback and _PySSL_msg_callback()
resets thread state in error path.
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 77cde5042a2f1eae489c11a67540afaf43cd5cdf)
Co-authored-by: Christian Heimes <christian@python.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level
2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow
TLS 1.0 and 1.1 on security level 2.
See:
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit f6c6b5821bff815bdc810de53992fd1fbdb2edd4)
Co-authored-by: Christian Heimes <christian@python.org>
|
|
|
|
|
|
|
| |
representation of logging level. (GH-24693) (#24825)
(cherry picked from commit bbba28212ce0f58096a4043f32442c6e727b74fc)
Automerge-Triggered-By: GH:vsajip
|
|
|
|
| |
See PEP 624.
(cherry picked from commit 1330338583d183250186a8123b99d2283e945b4f)
|
|
|
| |
Covers the ftplib security fix.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
bpo-43285: Make ftplib not trust the PASV response.
The IPv4 address value returned from the server in response to the PASV command
should not be trusted. This prevents a malicious FTP server from using the
response to probe IPv4 address and port combinations on the client network.
Instead of using the returned address, we use the IP address we're
already connected to. This is the strategy other ftp clients adopted,
and matches the only strategy available for the modern IPv6 EPSV command
where the server response must return a port number and nothing else.
For the rare user who _wants_ this ugly behavior, set a `trust_server_pasv_ipv4_address`
attribute on your `ftplib.FTP` instance to True..
(cherry picked from commit 0ab152c6b5d95caa2dc1a30fa96e10258b5f188e)
Co-authored-by: Gregory P. Smith <greg@krypto.org>
|
|
|
|
|
|
| |
Automerge-Triggered-By: GH:Mariatta
(cherry picked from commit 93d33b47af70ede473f82d7953509a0607259c31)
Co-authored-by: Kazantcev Andrey <45011689+heckad@users.noreply.github.com>
|
|
|
| |
(cherry picked from commit 35cacce5253c50eed0d285836f9ca0ac568991ca)
|
|
|
|
|
|
| |
Answer "Why is there no goto?" in the Design and History FAQ.
(cherry picked from commit 5e29021a5eb10baa9147fd977cab82fa3f652bf0)
Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>
|
|
|
|
|
|
|
| |
(GH-24836) (GH24854)
(cherry picked from commit 9c376bc1c4c8bcddb0bc4196b79ec8c75da494a8)
Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>
|
|
|
|
|
| |
(cherry picked from commit b6884ad2688451dd3cbc5984b23da5840e1b6df8)
Co-authored-by: Géry Ogam <gery.ogam@gmail.com>
|
|
|
|
|
|
|
| |
* Update link to Django's Context class.
* Update link to get-pip.py.
(cherry picked from commit d0a445490e2c0e1d2aef3005f14211d9a85196bf)
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* bpo-27820: Fix AUTH LOGIN logic in smtplib.SMTP (GH-24118)
* Fix auth_login logic (bpo-27820)
* Also fix a longstanding bug in the SimSMTPChannel.found_terminator() method that causes inability to test
SMTP AUTH with initial_response_ok=False.
(cherry picked from commit 7591d9455eb37525c832da3d65e1a7b3e6dbf613)
* Set timeout to 15 directly.
Co-authored-by: Pandu E POLUAN <pepoluan@gmail.com>
|
|
|
|
|
|
|
|
| |
Check to make sure stdout and stderr are not empty before selecting an item from them in Windows subprocess._communicate.
Co-authored-by: Gregory P. Smith <greg@krypto.org>
(cherry picked from commit b4fc44bb2d209182390b4f9fdf074a46b0165a2f)
Co-authored-by: Chris Griffith <chris@cdgriffith.com>
|
|
|
|
|
|
|
|
|
|
| |
Fix a race condition of test_stress_modifying_handlers() of
test_signal: only raise signals while we are in the
catch_unraisable_exception() context manager.
Moreover, don't check if we received at least one
signal if at least one signal got ignored.
(cherry picked from commit 1fa17e8cc62775a2e34b158135ce8589f9394f03)
Co-authored-by: Victor Stinner <vstinner@python.org>
|
|
|
|
|
| |
(cherry picked from commit b4f9089d4aa787c5b74134c98e5f0f11d9e63095)
Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>
|
|
|
|
|
| |
(cherry picked from commit 62a03cd490f81c0fb01eaceb31aa8a4c7800ed0e)
Co-authored-by: Kamil Turek <kamil.turek@hotmail.com>
|
|
|
|
|
| |
(cherry picked from commit 0d6bd1ca7c683137d52041194f3a2b02219f225a)
Co-authored-by: Victor Stinner <vstinner@python.org>
|
|
|
|
|
|
|
| |
(cherry picked from commit 0554044ddccdb7bf1fa4a8bc880e7a7b59f6479c)
Co-authored-by: Guilherme Martins Crocetti <gmcrocetti@gmail.com>
Co-authored-by: Guilherme Martins Crocetti <gmcrocetti@gmail.com>
|
|
|
|
|
| |
(cherry picked from commit 5eb7796b7f3aae91b145ccea51b528662f3b5ce1)
Co-authored-by: Brett Cannon <brett@python.org>
|
|
|
|
|
|
|
|
| |
tries to execute a non-Python signal handler (GH-24756) (GH-24762)
We can receive signals (at the C level, in `trip_signal()` in signalmodule.c) while `signal.signal` is being called to modify the corresponding handler. Later when `PyErr_CheckSignals()` is called to handle the given signal, the handler may be a non-callable object and would raise a cryptic asynchronous exception..
(cherry picked from commit 68245b7a1030287294c65c298975ab9026543fd2)
Co-authored-by: Antoine Pitrou <antoine@python.org>
|
|
|
|
|
|
|
| |
Previous wording implied that only the result of call N and N+1 could be
meaningfully compared, whereas comparing call N and N+M is fine.
(cherry picked from commit ff5f05934db241dfafc604989b2de3487b09ca82)
Co-authored-by: Alex Willmer <alex@moreati.org.uk>
|
|
|
|
|
| |
(cherry picked from commit 40d1b831ecd1b5b6a4fce9a908a6e61b50b360a0)
Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>
|
|
|
|
|
|
|
|
|
|
|
| |
(GH-23127) (GH-24749)
This reverts commit aca67da4fe68d5420401ac1782203d302875eb27.
(cherry picked from commit b5711c940f70af89f2b4cf081a3fcd83924f3ae7)
Co-authored-by: Jason R. Coombs <jaraco@jaraco.com>
Automerge-Triggered-By: GH:jaraco
|
|
|
|
|
|
|
|
| |
* Fail fast in shutil.move() to avoid creating destination directories on failure.
Co-authored-by: Zackery Spytz <zspytz@gmail.com>
(cherry picked from commit 132131b404e06ee1a19b040a1f96cd1118abed0c)
Co-authored-by: Winson Luk <winson.luk@gmail.com>
|
|
|
|
|
|
|
|
| |
(cherry picked from commit 94894dd45e4bad6efb27eac4497b24cdc18b3e2d)
Co-authored-by: Brandt Bucher <brandt@python.org>
Automerge-Triggered-By: GH:tiran
|
|
|
|
|
|
| |
Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
(cherry picked from commit 72fcd14a82369ed32a5846d76f50e3026cf4eec2)
Co-authored-by: Erik Soma <stillusingirc@gmail.com>
|
|
|
| |
(cherry picked from commit 3584d4b64a5373440f78237eac734831cfd83f79)
|