summaryrefslogtreecommitdiffstats
path: root/Misc
Commit message (Collapse)AuthorAgeFilesLines
* Reverted back to r67866.Vinay Sajip2010-01-281-5/+0
|
* Issue #7403: logging: Fixed possible race condition in lock creation.Vinay Sajip2009-11-271-0/+5
|
* Post 2.4.6.Martin v. Löwis2008-12-201-0/+6
|
* Prepare for 2.4.6.v2.4.6Martin v. Löwis2008-12-191-2/+2
|
* - Mention CVE-2008-5031 in issue #4469.Matthias Klose2008-12-161-1/+1
|
* Add 2.4.6 final section.Martin v. Löwis2008-12-131-0/+7
|
* Prepare for 2.4.6c1.Martin v. Löwis2008-12-131-1/+1
|
* Backported r55839 and r61350Martin v. Löwis2008-12-131-0/+4
| | | | | | Issue #4469: Prevent expandtabs() on string and unicode objects from causing a segfault when a large width is passed on 32-bit platforms.
* - Tools/faqwiz/move-faqwiz.sh: Fix unsecure use of temporary files.Matthias Klose2008-11-301-0/+5
|
* #4317: Fix an Array Bounds Read in imageop.rgb2rgb8.Amaury Forgeot d'Arc2008-11-181-0/+2
| | | | Backport of r67266
* backport the security fix part of r67246Benjamin Peterson2008-11-171-0/+3
|
* - Security Issue #2: imageop did not validate arguments correctly and couldMatthias Klose2008-11-121-0/+3
| | | | | | segfault as a result. CVE-2008-4864. backport r66689
* - Issue #2587: In the C API, PyString_FromStringAndSize() takes a signed sizeMatthias Klose2008-11-121-0/+5
| | | | | | | | parameter but was not verifying that it was greater than zero. Values less than zero will now raise a SystemError and return NULL to indicate a bug in the calling C code. CVE-2008-1887. backport r62261, r62271
* - Issues #2588, #2589: Fix potential integer underflow and overflowMatthias Klose2008-11-121-0/+3
| | | | conditions in the PyOS_vsnprintf C API function. CVE-2008-3144.
* - Issue #2586: Fix CVE-2008-1721, zlib crash fromMatthias Klose2008-11-121-0/+3
| | | | zlib.decompressobj().flush(val) when val is not positive.
* - Issue #1179: Fix CVE-2007-4965 and CVE-2008-1679, multiple integerMatthias Klose2008-11-121-0/+3
| | | | overflows in the imageop and rgbimgmodule modules.
* - Moved entries added after the 2.4.5 release to a new 2.4.6. entry.Matthias Klose2008-11-121-9/+29
|
* Security patches from Apple: prevent int overflow when allocating memoryNeal Norwitz2008-07-311-0/+2
|
* Backport r65182. This change modified from using the unsigned max valueNeal Norwitz2008-07-281-0/+7
| | | | | | | | | | | to the signed max value similar to 2.5 and trunk. Issue #2620: Overflow checking when allocating or reallocating memory was not always being done properly in some python types and extension modules. PyMem_MALLOC, PyMem_REALLOC, PyMem_NEW and PyMem_RESIZE have all been updated to perform better checks and places in the code that would previously leak memory on the error path when such an allocation failed have been fixed.
* Prepare for 2.4.5v2.4.5Martin v. Löwis2008-03-111-1/+6
|
* Prepare for 2.4.5c1v2.4.5c1Martin v. Löwis2008-03-022-2/+2
|
* Backport of r60793:Martin v. Löwis2008-03-021-0/+4
| | | | | | Added checks for integer overflows, contributed by Google. Some are only available if asserts are left in the code, in cases where they can't be triggered from Python code.
* Revert the following revisions, as they don't fix securityMartin v. Löwis2008-03-021-18/+0
| | | | | | | problems: 52448, 52468, 52472, 52475, 52646, 52797, 52802, 52863, 52999, 53001, 53101, 53371, 53373, 53383, 53384, 53736, 53812, 53921, 55578, 55580, 55581, 55772, 55775, 56557, 57093, 57094, 58630, 60114
* Backport r60104 + r60111 from trunk.Gregory P. Smith2008-01-191-0/+4
| | | | | | - Issue #1336: fix a race condition in subprocess.Popen if the garbage collector kicked in at the wrong time that would cause the process to hang when the child wrote to stderr.
* (Backport from r55770)Hye-Shik Chang2007-06-051-0/+4
| | | | | | Bug #1728403: Fix a bug that CJKCodecs StreamReader hangs when it reads a file that ends with incomplete sequence and sizehint argument for .read() is specified.
* HTML-escape the plain traceback in cgitb's HTML output, to preventGeorg Brandl2007-05-151-0/+4
| | | | | | the traceback inadvertently or maliciously closing the comment and injecting HTML into the error page. (backport from rev. 55348)
* backport: fix trace.py --ignore-dirSkip Montanaro2007-02-111-0/+3
|
* Backport trunk revision 53527:Thomas Wouters2007-01-231-0/+2
| | | | | | | | | | | | | SF patch #1630975: Fix crash when replacing sys.stdout in sitecustomize When running the interpreter in an environment that would cause it to set stdout/stderr/stdin's encoding, having a sitecustomize that would replace them with something other than PyFile objects would crash the interpreter. Fix it by simply ignoring the encoding-setting for non-files. This could do with a test, but I can think of no maintainable and portable way to test this bug, short of adding a sitecustomize.py to the buildsystem and have it always run with it (hmmm....)
* - idle: Honor the "Cancel" action in the save dialog (Debian bug #299092).Matthias Klose2007-01-111-0/+2
|
* Bug #1590891: random.randrange don't return correct value for big numberRaymond Hettinger2006-12-201-0/+2
|
* [Bug #1542016] Report PCALL_POP value. This makes the return value of ↵Andrew M. Kuchling2006-10-271-0/+3
| | | | sys.callstats() match its docstring.
* Add sections for a hypothetical future 2.4.5 releaseAndrew M. Kuchling2006-10-271-0/+22
|
* preparing for 2.4.4 finalAnthony Baxter2006-10-172-4/+4
|
* - Bug #1578513: Cross compilation was broken by a change to configure.Anthony Baxter2006-10-171-0/+11
| | | | | | Repair so that it's back to how it was in 2.4.3. Needs to be forward-ported to 2.5 branch and trunk.
* what month is it again? I get confused...v2.4.4c1Anthony Baxter2006-10-101-1/+1
|
* preparing for 2.4.4c1Anthony Baxter2006-10-101-1/+1
|
* note the previous checkinAnthony Baxter2006-10-101-1/+4
|
* Note that there are no longer warnings when buildingTim Peters2006-10-101-0/+3
| | | | _bsddb on Windows (Martin recently repaired that -- thanks!).
* Backport of the pieces of trunk rev 46589 relevant toTim Peters2006-10-091-2/+7
| | | | | | | | | | | | | fixing an unlikely crash bug in dict resizing, SF bug 1456209. The rest of rev 46589 changes whether Python suppresses exceptions during some dict-related comparisons. While I think that's a good idea, it does change visible behavior at times, and there was already some complaining about that on the trunk. Not a good idea for backporting. The part of 46589 checked in here can at worst stop segfaults, and I doubt anyone will gripe about that ;-)
* Backport r45505, r45573, r45576Martin v. Löwis2006-10-091-0/+2
| | | | | | | | | | | | | | | | | | - reset errno before calling confstr - use confstr() doc to simplify checks afterwards - Correct implementation and documentation of os.confstr. Add a simple test case. I've yet to figure out how to provoke a None return I can test. - Address issues brought up by MvL on python-checkins. I tested this with valgrind on amd64. The man pages I found for diff architectures are inconsistent on this. I'm not entirely sure this change is correct for all architectures either. Perhaps we should just over-allocate and not worry about it? The change to return None instead of "" in case of unconfigured values has not been backported.
* [Bug #1545341] Let the 'classifiers' parameter be a tuple as well as a list.Andrew M. Kuchling2006-10-091-0/+3
|
* Move an old news entry about cjkcodecs to the right place; "ExtensionHye-Shik Chang2006-10-081-7/+7
| | | | Modules".
* Backport from trunk r52223:Hye-Shik Chang2006-10-081-0/+3
| | | | | Bug #1572832: fix a bug in ISO-2022 codecs which may cause segfault when encoding non-BMP unicode characters. (Submitted by Ray Chason)
* [Backport r50743 | neal.norwitz]Andrew M. Kuchling2006-10-051-0/+2
| | | | | Handle allocation failures gracefully. Found with failmalloc. Many (all?) of these could be backported.
* [Backport r52147 | andrew.kuchling]Andrew M. Kuchling2006-10-051-0/+2
| | | | | | Cause a PyObject_Malloc() failure to trigger a MemoryError, and then add 'if (PyErr_Occurred())' checks to various places so that NULL is returned properly.
* [Backport r51248 | neal.norwitz]Andrew M. Kuchling2006-10-051-1/+3
| | | | | | | Fix segfault when doing string formatting on subclasses of long if __oct__, __hex__ don't return a string. Klocwork 308
* Build _ssl.pyd with OpenSSL 0.9.7lMartin v. Löwis2006-10-041-0/+3
|
* A review of overflow-detecting code in the 2.4 branch.Armin Rigo2006-10-041-2/+3
| | | | | | | | | | | | * unified the way intobject, longobject and mystrtoul handle values around -sys.maxint-1. * in general, trying to entierely avoid overflows in any computation involving signed ints or longs is extremely involved. Fixed a few simple cases where a compiler might be too clever (but that's all guesswork). * more overflow checks against bad data in marshal.c.
* Fix integer negation and absolute value to not relyMartin v. Löwis2006-10-041-0/+3
| | | | on undefined behaviour of the C compiler anymore.
* [Backport rev. 42545 by georg.brandl]Andrew M. Kuchling2006-10-031-0/+3
| | | | Make staticmethod and classmethod complain about keyword args.
generated by cgit v0.12 at 2025-12-27 12:54:30 (GMT)