Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Issue #20160: Handled passing of large structs to callbacks correctly. | Vinay Sajip | 2016-08-05 | 1 | -0/+35 |
| | |||||
* | Switch upload.pypi.io to upload.pypi.org | Donald Stufft | 2016-08-03 | 3 | -4/+4 |
| | |||||
* | Prevent HTTPoxy attack (CVE-2016-1000110) | Senthil Kumaran | 2016-07-31 | 2 | -0/+20 |
| | | | | | | | Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin. | ||||
* | Issue #27369: Merge test_pyexpat from 3.2 into 3.3 | Martin Panter | 2016-07-14 | 1 | -4/+2 |
|\ | |||||
| * | Issue #27369: Don’t test error message detail that changed in Expat 2.2.03.2 | Martin Panter | 2016-07-14 | 1 | -4/+2 |
| | | |||||
| * | #22758: fix regression in handling of secure cookies. | R David Murray | 2016-07-10 | 2 | -11/+58 |
| | | | | | | | | | | This backports the fix from #16611, per discussion with the release manager. | ||||
* | | Switch to the new upload url for PyPI | Donald Stufft | 2016-07-06 | 3 | -4/+4 |
| | | |||||
* | | Issue #25709: Fixed problem with in-place string concatenation and utf-8 cache. | Serhiy Storchaka | 2015-12-02 | 1 | -0/+17 |
| | | |||||
* | | Issue #25940: Merge ETIMEDOUT fix from 3.2 into 3.3 | Martin Panter | 2016-01-15 | 1 | -1/+1 |
|\ \ | |/ | |||||
| * | Issue #25940: On Windows, connecting to port 444 returns ETIMEDOUT | Martin Panter | 2016-01-15 | 1 | -1/+3 |
| | | |||||
* | | Issue #25940: Merge self-signed.pythontest.net testing from 3.2 into 3.3 | Martin Panter | 2016-01-14 | 6 | -89/+104 |
|\ \ | |/ | |||||
| * | Issue #25940: Use self-signed.pythontest.net in SSL tests | Martin Panter | 2016-01-14 | 5 | -96/+90 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is instead of svn.python.org, whose certificate recently expired, and whose new certificate uses a different root certificate. The certificate used at the pythontest server was modifed to set the "basic constraints" CA flag. This flag seems to be required for test_get_ca_certs_ capath() to work (in Python 3.4+). Added the new self-signed certificate to capath with the following commands: cp Lib/test/{selfsigned_pythontestdotnet.pem,capath/} c_rehash -v Lib/test/capath/ c_rehash -v -old Lib/test/capath/ # Note the generated file names cp Lib/test/capath/{selfsigned_pythontestdotnet.pem,0e4015b9.0} mv Lib/test/capath/{selfsigned_pythontestdotnet.pem,ce7b8643.0} The new server responds with "No route to host" when connecting to port 444. | ||||
| * | Issue #25940: Backport self-signed.pythontest.net testing for test_httplib | Georg Brandl | 2014-11-05 | 2 | -7/+24 |
| | | | | | | | | | | The svn.python.org server recently changed root certificate, causing the test to fail. This backports revision 4985375db40f. | ||||
* | | Issue #25021: Correctly make sure that product.__setstate__ does not access | Kristján Valur Jónsson | 2015-09-12 | 1 | -0/+10 |
| | | | | | | | | invalid memory. | ||||
* | | protect against mutation of the dict during insertion (closes #24407) | Benjamin Peterson | 2015-07-05 | 1 | -0/+15 |
| | | |||||
* | | merge 3.2 | Benjamin Peterson | 2015-05-26 | 1 | -7/+3 |
|\ \ | |/ | |||||
| * | keep distutils version in sync with python version automatically | Benjamin Peterson | 2015-05-26 | 1 | -7/+3 |
| | | |||||
* | | merge 3.2 (#22931) | Benjamin Peterson | 2015-05-23 | 2 | -3/+17 |
|\ \ | |/ | |||||
| * | allow square brackets in cookie values (closes #22931) | Benjamin Peterson | 2015-05-23 | 2 | -3/+18 |
| | | |||||
| * | Issue #23055: Fixed a buffer overflow in PyUnicode_FromFormatV. Analysis | Serhiy Storchaka | 2015-01-27 | 1 | -16/+129 |
| | | | | | | | | and fix by Guido Vranken. | ||||
* | | be more robust against the filters list changing under us (closes #24096) | Benjamin Peterson | 2015-05-03 | 1 | -0/+12 |
| | | |||||
* | | just sort the items tuple directly (closes #24094) | Benjamin Peterson | 2015-05-03 | 1 | -0/+19 |
| | | |||||
* | | Issues #23363, #23364, #23365, #23366: Fixed itertools overflow tests. | Serhiy Storchaka | 2015-02-02 | 1 | -7/+5 |
| | | | | | | | | Used PyMem_New to check overflow. | ||||
* | | reduce memory usage of test (closes #23369) | Benjamin Peterson | 2015-02-02 | 1 | -1/+2 |
| | | |||||
* | | check for overflows in permutations() and product() (closes #23363, closes ↵ | Benjamin Peterson | 2015-02-02 | 1 | -0/+12 |
| | | | | | | | | #23364) | ||||
* | | check for overflow in combinations_with_replacement (closes #23365) | Benjamin Peterson | 2015-02-02 | 1 | -1/+5 |
| | | |||||
* | | detect overflow in combinations (closes #23366) | Benjamin Peterson | 2015-02-02 | 1 | -0/+5 |
| | | |||||
* | | remove extra ws | Benjamin Peterson | 2015-02-01 | 1 | -1/+0 |
| | | |||||
* | | fix possible overflow in encode_basestring_ascii (closes #23369) | Benjamin Peterson | 2015-02-01 | 1 | -1/+8 |
| | | |||||
* | | Issue #23055: Fixed a buffer overflow in PyUnicode_FromFormatV. Analysis | Serhiy Storchaka | 2015-01-27 | 1 | -42/+119 |
| | | | | | | | | and fix by Guido Vranken. | ||||
* | | merge 3.2 (#16043) | Benjamin Peterson | 2014-12-06 | 2 | -3/+33 |
|\ \ | |/ | |||||
| * | add a default limit for the amount of data xmlrpclib.gzip_decode will return ↵ | Benjamin Peterson | 2014-12-06 | 2 | -3/+33 |
| | | | | | | | | (closes #16043) | ||||
* | | merge 3.2 | Benjamin Peterson | 2014-11-05 | 1 | -2/+2 |
|\ \ | |/ | |||||
| * | use pythontest.net for url fragment test | Benjamin Peterson | 2014-11-05 | 1 | -2/+2 |
| | | |||||
* | | merge 3.2 | Benjamin Peterson | 2014-11-03 | 1 | -3/+4 |
|\ \ | |/ | |||||
| * | move idna test domain to pythontest.net | Benjamin Peterson | 2014-11-03 | 1 | -3/+4 |
| | | |||||
| * | Bump to 3.2.6v3.2.6 | Georg Brandl | 2014-10-12 | 2 | -2/+2 |
| | | |||||
| * | #16040: fix unlimited read from connection in nntplib. | Georg Brandl | 2014-10-12 | 2 | -1/+20 |
| | | |||||
| * | Bump to 3.2.6rc1 | Georg Brandl | 2014-10-04 | 2 | -2/+2 |
| | | |||||
| * | ref #19855: skip uuid test_find_mac on non-Posix as in later branches | Georg Brandl | 2014-10-01 | 1 | -2/+3 |
| | | |||||
| * | Issue #19855: uuid.getnode() on Unix now looks on the PATH for the | Georg Brandl | 2014-09-30 | 2 | -16/+52 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | executables used to find the mac address, with /sbin and /usr/sbin as fallbacks. Issue #11508: Fixed uuid.getnode() and uuid.uuid1() on environment with virtual interface. Original patch by Kent Frazier. Issue #18784: The uuid module no more attempts to load libc via ctypes.CDLL, if all necessary functions are already found in libuuid. Patch by Evgeny Sologubov. Issue #16102: Make uuid._netbios_getnode() work again on Python 3. | ||||
| * | Backport b533cc11d114 to fix intermittent test_urllibnet failures. | Georg Brandl | 2014-09-30 | 1 | -1/+1 |
| | | |||||
| * | Fix-up for 0f362676460d: add missing size argument to ↵ | Georg Brandl | 2014-09-30 | 1 | -1/+5 |
| | | | | | | | | SSLFakeFile.readline(), as in 2.6 backport 8a6def3add5b | ||||
| * | Issue #20939: Use www.example.com instead of www.python.org to avoid test | Ned Deily | 2014-03-27 | 2 | -18/+18 |
| | | | | | | | | failures when ssl is not present. | ||||
| * | Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to limit | Georg Brandl | 2014-09-30 | 2 | -1/+24 |
| | | | | | | | | line length. Patch by Emil Lind. | ||||
| * | Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all ↵ | Georg Brandl | 2014-09-17 | 2 | -2/+4 |
| | | | | | | | | interfaces. | ||||
| * | Lax cookie parsing in http.cookies could be a security issue when combined | Antoine Pitrou | 2014-09-16 | 2 | -1/+11 |
| | | | | | | | | | | | | with non-standard cookie handling in some Web browsers. Reported by Sergey Bobrov. | ||||
| * | Issue #22419: Limit the length of incoming HTTP request in wsgiref server to | Georg Brandl | 2014-09-30 | 2 | -1/+13 |
| | | | | | | | | | | 65536 bytes and send a 414 error code for higher lengths. Patch contributed by Devin Cook. | ||||
| * | Issue #22517: When a io.BufferedRWPair object is deallocated, clear its | Georg Brandl | 2014-09-30 | 1 | -0/+6 |
| | | | | | | | | weakrefs. | ||||
| * | Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to | Georg Brandl | 2014-09-30 | 2 | -2/+15 |
| | | | | | | | | | | prevent readline() calls from consuming too much memory. Patch by Jyrki Pulliainen. |