summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug ↵Serhiy Storchaka2016-10-252-10/+5
| | | | build.
* Issue #28248: Update Windows build to use OpenSSL 1.0.2jZachary Ware2016-10-114-3/+8
|
* Issue #27759: Fix selectors incorrectly retain invalid file descriptors.Yury Selivanov2016-10-063-9/+43
| | | | (Backported to 3.4 as this bug might be exploited to for DoS)
* properly handle the single null-byte file (closes #24022)Benjamin Peterson2016-09-191-1/+1
|
* Issue #26171: Null mergeBerker Peksag2016-09-140-0/+0
|\
| * Issue #26171: Prevent buffer overflow in get_dataBerker Peksag2016-09-142-0/+8
| | | | | | | | Backport of 01ddd608b85c.
* | Upgrade setuptools to 27.1.2Donald Stufft2016-09-092-1/+1
| |
* | Upgrade setuptools to 27.1.1Donald Stufft2016-09-092-1/+1
| |
* | Issue #27960: Revert state to 675e20c38fdac6, backing out all changes by ↵Jason R. Coombs2016-09-061-2/+5
| | | | | | | | developed for Issue #12885.
* | Issue #12885: Revert commits in 3.4 branch which is security-only fixes.Jason R. Coombs2016-09-023-69/+29
| |
* | Issue #12885: Correct issue reference in NEWSJason R. Coombs2016-09-021-1/+1
| |
* | Backed out changeset cc86e9e102e8Jason R. Coombs2016-09-021-2/+9
| |
* | Issue #12285: Update NEWSJason R. Coombs2016-09-021-0/+2
| |
* | Issue #12285: Replace implementation of findall with implementation from ↵Jason R. Coombs2015-09-191-27/+21
| | | | | | | | Setuptools 7ce820d524db.
* | Sort result to avoid spurious errors due to order.Jason R. Coombs2015-08-301-2/+2
| |
* | Add docstring and additional test revealing nuances of the implementation as ↵Jason R. Coombs2015-09-191-0/+16
| | | | | | | | found in setuptools.
* | Add another test capturing the basic discovery expectation.Jason R. Coombs2015-08-301-0/+11
| |
* | Issue #12285: Add test capturing failure.Jason R. Coombs2015-08-301-0/+10
| |
* | Use modern mechanism for test discoveryJason R. Coombs2015-08-301-5/+2
| |
* | merge 3.3 (#27783)Benjamin Peterson2016-08-172-8/+9
|\ \ | |/
| * rearrange methodcaller_new so that the main error case does not cause ↵Benjamin Peterson2016-08-172-8/+9
| | | | | | | | uninitialized memory usage (closes #27783)
* | merge 3.3 (#27774)Benjamin Peterson2016-08-162-3/+3
|\ \ | |/
| * do not decref value borrowed from list (closes #27774)Benjamin Peterson2016-08-162-3/+3
| |
* | fail when negative values are passed to instr()Benjamin Peterson2016-08-163-2/+12
| |
* | Update setuptools/pip to 25.2.0/8.1.2Donald Stufft2016-08-143-2/+2
| |
* | merge 3.3 (closes #27760)Benjamin Peterson2016-08-142-9/+17
|\ \ | |/
| * fix possible integer overflow in binascii.b2a_qp (closes #27760)Benjamin Peterson2016-08-142-9/+18
| | | | | | | | Reported by Thomas E. Hybel
* | do not allow reading negative values with getstr()Benjamin Peterson2016-08-143-0/+14
| |
* | merge 3.3 (#27758)Benjamin Peterson2016-08-142-4/+22
|\ \ | |/
| * check for overflow in join_append_data (closes #27758)Benjamin Peterson2016-08-142-4/+22
| | | | | | | | Reported by Thomas E. Hybel
* | Issue #20160: Merged fix from 3.3.Vinay Sajip2016-08-053-2/+65
|\ \ | |/
| * Issue #20160: Handled passing of large structs to callbacks correctly.Vinay Sajip2016-08-053-2/+65
| |
* | Merge 3.3Donald Stufft2016-08-033-5/+5
|\ \ | |/
| * Switch upload.pypi.io to upload.pypi.orgDonald Stufft2016-08-033-4/+4
| |
* | [merge from 3.3] Prevent HTTPoxy attack (CVE-2016-1000110)Senthil Kumaran2016-07-315-0/+42
|\ \ | |/ | | | | | | | | | | Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin.
| * Prevent HTTPoxy attack (CVE-2016-1000110)Senthil Kumaran2016-07-315-0/+42
| | | | | | | | | | | | | | Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin.
* | Issue #27369: Merge test_pyexpat from 3.3 into 3.4Martin Panter2016-07-142-4/+8
|\ \ | |/
| * Issue #27369: Merge test_pyexpat from 3.2 into 3.3Martin Panter2016-07-142-4/+5
| |\
| | * Issue #27369: Don’t test error message detail that changed in Expat 2.2.03.2Martin Panter2016-07-142-4/+5
| | |
| | * Issue #22758: Move NEWS entry to Library sectionMartin Panter2016-07-141-3/+3
| | |
* | | #22758 null mergeR David Murray2016-07-100-0/+0
|\ \ \ | |/ /
| * | #22758 null mergeR David Murray2016-07-100-0/+0
| |\ \ | | |/
| | * #22758: fix regression in handling of secure cookies.R David Murray2016-07-103-11/+61
| | | | | | | | | | | | | | | This backports the fix from #16611, per discussion with the release manager.
* | | merge 3.3Benjamin Peterson2016-07-060-0/+0
|\ \ \ | |/ /
| * | Switch to the new upload url for PyPIDonald Stufft2016-07-063-4/+4
| | |
| * | Issue #25709: Fixed problem with in-place string concatenation and utf-8 cache.Serhiy Storchaka2015-12-023-0/+27
| | |
* | | Switch to the new upload url for PyPIDonald Stufft2016-07-063-5/+5
| | |
* | | Merge.Larry Hastings2016-06-273-5/+11
|\ \ \
| * | | Docs: add html-stable autobuild variantGeorg Brandl2016-06-151-1/+7
| | | |
| * | | sync ordering of stddef.h includes with expat 2.1.1Benjamin Peterson2016-06-142-4/+4
| | | |
generated by cgit v0.12 at 2024-11-14 13:13:47 (GMT)