summaryrefslogtreecommitdiffstats
path: root/Modules
Commit message (Collapse)AuthorAgeFilesLines
* [3.3] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3352)Victor Stinner2017-09-0620-153/+1281
| | | | | | | | | | | | | * bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 * Upgrade libexpat embedded copy from version 2.2.1 to 2.2.3 to get security fixes. * Update libexpat from 2.2.3 to 2.2.4. Fix copying of partial characters for UTF-8 input (libexpat bug 115): https://github.com/libexpat/libexpat/issues/115 * Define XML_POOR_ENTROPY when compiling expat
* [security][3.3] bpo-30730: Prevent environment variables injection in ↵Serhiy Storchaka2017-07-191-4/+19
| | | | subprocess on Windows. (GH-2325) (#2363)
* Avoid _GNU_SOURCE redefined warning in xmlparse.c (#2670)Segev Finer2017-07-161-1/+1
| | | | (cherry picked from commit f52325598e7a9683787d76a42009fc16790a0089)
* [3.3] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) ↵Victor Stinner2017-07-1615-605/+1392
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (#2204) * bpo-29591: Upgrade Modules/expat to libexpat 2.2 (#2164) * bpo-29591: Upgrade Modules/expat to libexpat 2.2 * bpo-29591: Restore Python changes on expat * bpo-29591: Remove expat config of unsupported platforms Remove the configuration (Modules/expat/*config.h) of unsupported platforms: * Amiga * MacOS Classic on PPC32 * Open Watcom * bpo-29591: Remove useless XML_HAS_SET_HASH_SALT The XML_HAS_SET_HASH_SALT define of Modules/expat/expat.h became useless since our local expat copy was upgrade to expat 2.1 (it's now expat 2.2.0). (cherry picked from commit 23ec4b57e1359f9c539b8defc317542173ae087e) * bpo-30694: Upgrade Modules/expat/ to libexpat 2.2.1 (#2300) New file: Modules/expat/siphash.h. (cherry picked from commit 5ff7132313eb651107b179d20218dfe5d4e47f13) * bpo-30726: PCbuild _elementtree: remove duplicate defines (#2348) bpo-30726, bpo-29591: libexpat 2.2.1 of Modules/expat/ now uses a winconfig.h configuration file which already defines: * XML_NS * XML_DTD * BYTEORDER=1234 * XML_CONTEXT_BYTES=1024 * HAVE_MEMMOVE Remove these defines from PCbuild/_elementtree.vcxproj to prevent compiler warnings. Co-Authored-By: Jeremy Kloth <jeremy.kloth@gmail.com> (cherry picked from commit c8fb58bd7917151e63398587a7fc2126db7c26de) * bpo-30726: Fix elementtree warnings on Windows due to expat upgrade (#2319) * bpo-30726: Fix elementtree warnings on Windows Caused by usage of `getenv` which should be safe. And a few integer truncations which should also be ok. * bpo-30726: Don't ignore libexpat warnings which haypo intends to fix upstream (cherry picked from commit 87c65550730a8f85ce339ba197bce4fb7e836619)
* Issue #26171: Prevent buffer overflow in get_dataBerker Peksag2016-09-141-0/+5
| | | | Backport of 01ddd608b85c.
* rearrange methodcaller_new so that the main error case does not cause ↵Benjamin Peterson2016-08-171-8/+7
| | | | uninitialized memory usage (closes #27783)
* do not decref value borrowed from list (closes #27774)Benjamin Peterson2016-08-161-3/+1
|
* fix possible integer overflow in binascii.b2a_qp (closes #27760)Benjamin Peterson2016-08-141-9/+16
| | | | Reported by Thomas E. Hybel
* check for overflow in join_append_data (closes #27758)Benjamin Peterson2016-08-141-4/+19
| | | | Reported by Thomas E. Hybel
* Issue #20160: Handled passing of large structs to callbacks correctly.Vinay Sajip2016-08-052-2/+30
|
* remove some copyright notices supserseded by the toplevel onesBenjamin Peterson2016-01-012-4/+0
|
* Issue #25021: Correctly make sure that product.__setstate__ does not accessKristján Valur Jónsson2015-09-121-2/+10
| | | | invalid memory.
* use safe allocation and reallocation macrosBenjamin Peterson2015-06-271-16/+10
|
* just sort the items tuple directly (closes #24094)Benjamin Peterson2015-05-031-27/+3
|
* fix possible overflow bugs in unicodedata (closes #23367)Benjamin Peterson2015-03-021-3/+10
|
* add overflow checking (closes #23361)Benjamin Peterson2015-02-101-2/+12
|
* Issues #23363, #23364, #23365, #23366: Fixed itertools overflow tests.Serhiy Storchaka2015-02-021-20/+6
| | | | Used PyMem_New to check overflow.
* check for overflows in permutations() and product() (closes #23363, closes ↵Benjamin Peterson2015-02-021-2/+16
| | | | #23364)
* check for overflow in combinations_with_replacement (closes #23365)Benjamin Peterson2015-02-021-0/+4
|
* detect overflow in combinations (closes #23366)Benjamin Peterson2015-02-021-0/+4
|
* fix possible overflow in encode_basestring_ascii (closes #23369)Benjamin Peterson2015-02-011-4/+11
|
* clear BufferedRWPair weakrefs on deallocation (closes #22517)Benjamin Peterson2014-09-301-0/+2
|
* merge 3.2Benjamin Peterson2014-04-141-4/+5
|\
| * disallow a negative idx parameterBenjamin Peterson2014-04-141-4/+5
| |
* | merge 3.2Benjamin Peterson2014-04-141-1/+4
|\ \ | |/
| * in scan_once, prevent the reading of arbitrary memory when passed a negative ↵Benjamin Peterson2014-04-141-1/+4
| | | | | | | | | | | | index Bug reported by Guido Vranken.
* | fix ctypes test alignment assumptions (closes #20946)Benjamin Peterson2014-03-161-3/+3
| | | | | | | | Patch by Andreas Schwab.
* | only define zero constant when it is usedBenjamin Peterson2014-03-151-0/+2
| |
* | remove unused zero constantsBenjamin Peterson2014-03-151-3/+0
| |
* | Issue #20283: RE pattern methods now accept the string keyword parametersSerhiy Storchaka2014-03-061-20/+64
| | | | | | | | | | as documented. The pattern and source keyword parameters are left as deprecated aliases.
* | Make the various iterators' "setstate" sliently and consistently clip theKristján Valur Jónsson2014-03-051-0/+2
| | | | | | | | | | index. This avoids the possibility of setting an iterator to an invalid state.
* | Issue #20404: reject non-text encodings early in TextIOWrapper.Georg Brandl2014-03-021-12/+22
| |
* | backout 2807a5f011e4 for causing #20621Benjamin Peterson2014-02-161-238/+47
| |
* | backout d28242a636c7 so I can backout 2807a5f011e4Benjamin Peterson2014-02-161-1/+3
| |
* | #12211: remove paragraph about NaNsAndrew Kuchling2014-02-161-3/+1
| |
* | #12211: clarify math.copysign() documentation and docstringAndrew Kuchling2014-02-161-1/+5
| |
* | Issue #17671: Fixed a crash when use non-initialized io.BufferedRWPair.Serhiy Storchaka2014-02-121-2/+7
| | | | | | | | Based on patch by Stephen Tu.
* | avoid name clash with posix_close (closes #20594)Benjamin Peterson2014-02-111-2/+6
| |
* | Issue #20437: Fixed 21 potential bugs when deleting objects references.Serhiy Storchaka2014-02-099-37/+19
| |
* | Issue #20065: socketmodule: Fix build error when AF_CAN is defined without theCharles-François Natali2014-02-081-3/+3
| | | | | | | | proper CAN headers.
* | Issue #20374: delete spurious empty lineNed Deily2014-02-061-1/+0
| |
* | Issue #20374: Avoid compiler warnings when compiling readline with libedit.Ned Deily2014-02-061-0/+9
| |
* | Issue #20515: Fix NULL pointer dereference introduced by issue #20368Christian Heimes2014-02-041-0/+3
| | | | | | | | CID 1167595
* | restore namespacing of pyexpat symbols (closes #19186)Benjamin Peterson2014-02-041-0/+4
| |
* | Issue #20368: The null character now correctly passed from Tcl to Python.Serhiy Storchaka2014-02-031-68/+114
| | | | | | | | Improved error handling in variables-related commands.
* | Issue #20311: Revert 033137c12d88, select.epoll.poll() rounds again the timeoutVictor Stinner2014-01-251-3/+1
| | | | | | | | towards zero
* | new plan: just remove typecasts (closes #20374)Benjamin Peterson2014-01-241-4/+4
| |
* | use new readline function types (closes #20374)Benjamin Peterson2014-01-241-3/+3
| |
* | Issue #19936: Restored executable bits for several libffi files.Serhiy Storchaka2014-01-234-0/+0
| | | | | | | | These files have shebangs and executable bits in the libffi distribution.
* | Issue #20311: select.epoll.poll() now rounds the timeout away from zero,Victor Stinner2014-01-211-1/+3
| | | | | | | | | | instead of rounding towards zero. For example, a timeout of one microsecond is now rounded to one millisecond, instead of being rounded to zero.