Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | gh-96577: Fixes buffer overrun in _msi module (GH-96633) | Steve Dower | 2022-09-07 | 2 | -2/+3 | |
| | ||||||
* | GH-96465: Cache hashes for Fraction instances (GH-96483) | Raymond Hettinger | 2022-09-07 | 2 | -30/+36 | |
| | ||||||
* | gh-88057: in compile.c, assertion that stackdepth is alway >=0 is missing in ↵ | Irit Katriel | 2022-09-07 | 1 | -0/+1 | |
| | | | | one place (GH-96513) | |||||
* | gh-94808: Improve coverage of _PyBytes_FormatEx (GH-95895) | Michael Droettboom | 2022-09-07 | 1 | -0/+18 | |
| | | | | | | | | There were two specific areas not covered: - %(name) syntax - %*s syntax Automerge-Triggered-By: GH:iritkatriel | |||||
* | gh-96641: Do not expose `KeyWrapper` in `_functoolsmodule.c` (gh-96642) | Nikita Sobolev | 2022-09-07 | 2 | -3/+3 | |
| | ||||||
* | GH-91432: Remove the iterator_exhausted_no_error label (GH-96517) | Brandt Bucher | 2022-09-07 | 1 | -16/+20 | |
| | ||||||
* | gh-96538: Fix refleak in _bisectmodule.c (gh-96619) | Dennis Sweeney | 2022-09-06 | 2 | -0/+30 | |
| | ||||||
* | gh-96628: remove deprecated and ignored arg of sysconfig.is_python_build() ↵ | Irit Katriel | 2022-09-06 | 1 | -1/+1 | |
| | | | | (GH-96629) | |||||
* | gh-96611: Fix error message for invalid UTF-8 in mid-multiline string (#96623) | Michael Droettboom | 2022-09-06 | 3 | -0/+16 | |
| | ||||||
* | GH-96572: fix use after free in trace refs build mode (#96618) | Kumar Aditya | 2022-09-06 | 2 | -1/+2 | |
| | ||||||
* | GH-96612: Skip incomplete frames in tracemalloc traces. (GH-96613) | Mark Shannon | 2022-09-06 | 3 | -3/+23 | |
| | ||||||
* | gh-96478: Fix new test when run in refleak mode (#96615) | Jelle Zijlstra | 2022-09-06 | 1 | -12/+12 | |
| | | | | ./python.exe -m test -R : test.test_typing would fail, apparently because the dictionary used in the @patch decorator was modified. | |||||
* | GH-96569: Add two NULL checks to avoid undefined behavior. (GH-96585) | Mark Shannon | 2022-09-06 | 3 | -10/+13 | |
| | ||||||
* | GH-93911: Fix `LOAD_ATTR_PROPERTY` caches (GH-96519) | Brandt Bucher | 2022-09-06 | 2 | -5/+7 | |
| | ||||||
* | gh-96478: Test `@overload` on C functions (#96479) | Nikita Sobolev | 2022-09-05 | 1 | -0/+14 | |
| | | | Co-authored-by: Alex Waygood <Alex.Waygood@Gmail.com> | |||||
* | argparse: Remove unused name variable when handling ArgumentTypeError (#96549) | Jonathon Reinhart | 2022-09-05 | 1 | -1/+0 | |
| | | | | | | | | This removes the unused `name` variable in the block where `ArgumentTypeError` is handled. `ArgumentTypeError` errors are handled by showing just the string of the exception; unlike `ValueError`, the name (`__name__`) of the function is not included in the error message. Fixes #96548 | |||||
* | [doc] Update example in traceback doc (GH-96600) | Irit Katriel | 2022-09-05 | 1 | -15/+11 | |
| | | | | | This Monty Python reference is of-its-time. It could seem inappropriate in the context of today's sensibilities around mental health. Automerge-Triggered-By: GH:iritkatriel | |||||
* | gh-93963: Remove ResourceReaderDefaultsTests (GH-96598) | Jason R. Coombs | 2022-09-05 | 1 | -28/+0 | |
| | | | Automerge-Triggered-By: GH:jaraco | |||||
* | gh-96559: Fixes Windows launcher handling of defaults using old-style tags, ↵ | Steve Dower | 2022-09-05 | 4 | -22/+51 | |
| | | | | and adds What's New section (GH-96595) | |||||
* | Add upstream openssl 1.1.1q patch for trivial build error on macOS (GH-96594) | Ned Deily | 2022-09-05 | 2 | -0/+18 | |
| | ||||||
* | gh-92986: Fix ast.unparse when ImportFrom.level is None (#92992) | Shantanu | 2022-09-05 | 3 | -1/+8 | |
| | | | | | This doesn't happen naturally, but is allowed by the ASDL and compiler. We don't want to change ASDL for backward compatibility reasons (#57645, #92987) | |||||
* | gh-96587: Raise `SyntaxError` for PEP654 on older `feature_version` (#96588) | Nikita Sobolev | 2022-09-05 | 4 | -2/+15 | |
| | ||||||
* | gh-84095: Fill documentation gap regarding user-defined objects. (GH-96574) | Vinay Sajip | 2022-09-05 | 1 | -0/+19 | |
| | ||||||
* | gh-96538: Move some type-checking out of bisect.bisect() loops (GH-96539) | Dennis Sweeney | 2022-09-05 | 2 | -16/+143 | |
| | ||||||
* | gh-93973: Add all_errors to asyncio.create_connection (#93974) | Pamela Fox | 2022-09-05 | 4 | -2/+54 | |
| | | | | Co-authored-by: Oleg Iarygin <dralife@yandex.ru> | |||||
* | ceval.c's GETITEM should have asserts, not set exceptions (GH-96518) | Dennis Sweeney | 2022-09-04 | 1 | -2/+8 | |
| | ||||||
* | Docs: alphabetically order sqlite3.Cursor attrs (#96565) | Erlend E. Aasland | 2022-09-04 | 1 | -30/+31 | |
| | ||||||
* | gh-95778: Correctly pre-check for int-to-str conversion (#96537) | Mark Dickinson | 2022-09-04 | 4 | -7/+107 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Converting a large enough `int` to a decimal string raises `ValueError` as expected. However, the raise comes _after_ the quadratic-time base-conversion algorithm has run to completion. For effective DOS prevention, we need some kind of check before entering the quadratic-time loop. Oops! =) The quick fix: essentially we catch _most_ values that exceed the threshold up front. Those that slip through will still be on the small side (read: sufficiently fast), and will get caught by the existing check so that the limit remains exact. The justification for the current check. The C code check is: ```c max_str_digits / (3 * PyLong_SHIFT) <= (size_a - 11) / 10 ``` In GitHub markdown math-speak, writing $M$ for `max_str_digits`, $L$ for `PyLong_SHIFT` and $s$ for `size_a`, that check is: $$\left\lfloor\frac{M}{3L}\right\rfloor \le \left\lfloor\frac{s - 11}{10}\right\rfloor$$ From this it follows that $$\frac{M}{3L} < \frac{s-1}{10}$$ hence that $$\frac{L(s-1)}{M} > \frac{10}{3} > \log_2(10).$$ So $$2^{L(s-1)} > 10^M.$$ But our input integer $a$ satisfies $|a| \ge 2^{L(s-1)}$, so $|a|$ is larger than $10^M$. This shows that we don't accidentally capture anything _below_ the intended limit in the check. <!-- gh-issue-number: gh-95778 --> * Issue: gh-95778 <!-- /gh-issue-number --> Co-authored-by: Gregory P. Smith [Google LLC] <greg@krypto.org> | |||||
* | no-issue: Fix typo in 3.11.0a7.rst (gh-96547) | Ikko Ashimine | 2022-09-04 | 1 | -1/+1 | |
| | | | accross -> across | |||||
* | gh-68163: Correct conversion of Rational instances to float (GH-25619) | Sergey B Kirpichev | 2022-09-04 | 4 | -4/+36 | |
| | | | | | | | * gh-68163: Correct conversion of Rational instances to float Also document that numerator/denominator properties are instances of Integral. Co-authored-by: Mark Dickinson <dickinsm@gmail.com> | |||||
* | gh-93884: Improve test coverage of `PyNumber_ToBase` (GH-93932) | Charlie Zhao | 2022-09-04 | 2 | -8/+25 | |
| | | | | | | | Link to #93884 * Test with some large negative and positive values(out of range of a longlong,i.e.[-2\*\*63, 2\*\*63-1]) * Test with objects of non-int type Automerge-Triggered-By: GH:mdickinson | |||||
* | gh-95778: remove unneeded doc note on float.as_integer_ratio (#96553) | Gregory P. Smith | 2022-09-04 | 1 | -7/+0 | |
| | | | Per mdickinson@'s comment on the main branch PR. | |||||
* | doc typo: spell limitation (#96542) | Mehrdad Moradizadeh | 2022-09-04 | 1 | -1/+1 | |
| | ||||||
* | gh-90195: Unset logger disabled flag when configuring it. (GH-96530) | Vinay Sajip | 2022-09-03 | 2 | -0/+30 | |
| | ||||||
* | gh-89087: Update logging.QueueHandler documentation to clarify record… ↵ | Vinay Sajip | 2022-09-03 | 1 | -0/+14 | |
| | | | | (GH-96527) | |||||
* | gh-75500: Update idlelib/help.html (#96523) | Terry Jan Reedy | 2022-09-03 | 1 | -7/+8 | |
| | ||||||
* | GH-96458: Statically initialize utf8 representation of static strings (#96481) | Kumar Aditya | 2022-09-03 | 6 | -165/+139 | |
| | ||||||
* | gh-45108: Improve docstring and testing of ZipFile.testfile() (GH-96233) | Serhiy Storchaka | 2022-09-03 | 3 | -12/+13 | |
| | ||||||
* | [Enum] bump version tag on HTTP status category indicators (GH-96508) | Alexandru Mărășteanu | 2022-09-02 | 1 | -1/+1 | |
| | ||||||
* | bpo-30419: DOC: Update missing information in bdb docs (#1687) | Cheryl Sabella | 2022-09-02 | 2 | -65/+133 | |
| | | | | | Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com> Co-authored-by: Martin Panter <vadmium@users.noreply.github.com> Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> | |||||
* | gh-95180: Add `TaskGroup` and `Runner` to AsyncIO API Index (#95189) | siph | 2022-09-02 | 1 | -9/+20 | |
| | | | | | Also rearrange some items in the list. Co-authored-by: Thomas Grainger <tagrain@gmail.com> | |||||
* | gh-95778: CVE-2020-10735: Prevent DoS by very large int() (#96499) | Gregory P. Smith | 2022-09-02 | 28 | -20/+803 | |
| | | | | | | | | | | | | | | | | Integer to and from text conversions via CPython's bignum `int` type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of digits can consume several CPU seconds. This PR comes fresh from a pile of work done in our private PSRT security response team repo. Signed-off-by: Christian Heimes [Red Hat] <christian@python.org> Tons-of-polishing-up-by: Gregory P. Smith [Google] <greg@krypto.org> Reviews via the private PSRT repo via many others (see the NEWS entry in the PR). <!-- gh-issue-number: gh-95778 --> * Issue: gh-95778 <!-- /gh-issue-number --> I wrote up [a one pager for the release managers](https://docs.google.com/document/d/1KjuF_aXlzPUxTK4BMgezGJ2Pn7uevfX7g0_mvgHlL7Y/edit#). Much of that text wound up in the Issue. Backports PRs already exist. See the issue for links. | |||||
* | Allow whitespace around a slash in fraction string inputs (GH-96496) | Raymond Hettinger | 2022-09-02 | 4 | -4/+7 | |
| | ||||||
* | gh-96168: Improve sqlite3 dict_factory example (#96457) | Erlend E. Aasland | 2022-09-01 | 1 | -18/+9 | |
| | | | | Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM> Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com> | |||||
* | gh-93554: Conditional jump opcodes only jump forward (GH-96318) | Irit Katriel | 2022-09-01 | 13 | -448/+298 | |
| | ||||||
* | gh-96455: update example in exception_handling_notes.txt to the 3.11RC ↵ | Irit Katriel | 2022-09-01 | 1 | -25/+28 | |
| | | | | bytecode (GH-96456) | |||||
* | gh-93678: apply remove_redundant_jumps in optimize_cfg (GH-96274) | Irit Katriel | 2022-09-01 | 2 | -14/+36 | |
| | ||||||
* | gh-96143: subprocess API %s/universal_newlines=/text=/g. (GH-96468) | Gregory P. Smith | 2022-09-01 | 1 | -4/+4 | |
| | | | | | minor missed test cleanup to use the modern API from the big review. Automerge-Triggered-By: GH:gpshead | |||||
* | GH-96079 Fix missing field name for _AnnotatedAlias (#96080) | Anh71me | 2022-08-31 | 3 | -1/+6 | |
| | ||||||
* | gh-96408: Document difference between set-like view and sets. (GH-96439) | Piotr Kaznowski | 2022-08-31 | 1 | -1/+5 | |
| |