Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fixes Issue 14234: fix for the previous commit, keep compilation when | Gregory P. Smith | 2012-03-15 | 2 | -0/+7 |
| | | | | | using --with-system-expat working when the system expat does not have salted hash support. | ||||
* | Transplant from main repo d6c197edd99b: Fixes Issue #14234: CVE-2012-0876: ↵ | Georg Brandl | 2012-03-15 | 4 | -59/+130 |
| | | | | Randomize hashes of xml attributes | ||||
* | merge with 3.2 | Georg Brandl | 2012-02-21 | 1 | -3/+3 |
|\ | |||||
| * | Remove reST markup from --help output. Also: O(n**2) is dict construction, ↵ | Georg Brandl | 2012-02-21 | 1 | -3/+3 |
| | | | | | | | | not single insertion. | ||||
* | | Fix test failure in test_cmd_line by initializing the hash secret at the ↵ | Antoine Pitrou | 2012-02-21 | 1 | -2/+28 |
| | | | | | | | | earliest point. | ||||
* | | merge 3.2 | Benjamin Peterson | 2012-02-21 | 1 | -0/+1 |
|\ \ | |/ | |||||
| * | ensure no one tries to hash things before the random seed is found | Benjamin Peterson | 2012-02-21 | 1 | -0/+1 |
| | | |||||
* | | sqlite3: Fix 64-bit integer handling in user functions on 32-bit architectures | Petri Lehtinen | 2012-02-21 | 1 | -6/+2 |
| | | | | | | | | Closes #8033. | ||||
* | | Merge from 3.1: Issue #13703: add a way to randomize the hash values of ↵ | Georg Brandl | 2012-02-20 | 3 | -110/+38 |
|\ \ | |/ | | | | | | | | | | | | | | | basic types (str, bytes, datetime) in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated. The environment variable PYTHONHASHSEED and the new command line flag -R control this behavior. | ||||
| * | Issue #13703: add a way to randomize the hash values of basic types (str, ↵ | Georg Brandl | 2012-02-20 | 3 | -108/+37 |
| | | | | | | | | | | | | | | | | | | bytes, datetime) in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated. The environment variable PYTHONHASHSEED and the new command line flag -R control this behavior. | ||||
* | | Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert(). | Antoine Pitrou | 2012-02-15 | 1 | -9/+14 |
| | | |||||
* | | Issue #13015: Fix a possible reference leak in defaultdict.__repr__. | Antoine Pitrou | 2012-02-15 | 1 | -1/+3 |
| | | | | | | | | Patch by Suman Saha. | ||||
* | | Issue #10811: Fix recursive usage of cursors. Instead of crashing, raise a ↵ | Petri Lehtinen | 2012-02-06 | 2 | -10/+20 |
| | | | | | | | | ProgrammingError now. | ||||
* | | Issue #13817: After fork(), reinit the ad-hoc TLS implementation earlier to fix | Charles-François Natali | 2012-02-02 | 1 | -1/+3 |
| | | | | | | | | | | a random deadlock when fork() is called in a multithreaded process in debug mode, and make PyOS_AfterFork() more robust. | ||||
* | | sqlite3: Handle strings with embedded zeros correctly | Petri Lehtinen | 2012-02-01 | 2 | -8/+9 |
| | | | | | | | | Closes #13676. | ||||
* | | Fix zip_import.c's read_directory() to use appropriate types for the values | Gregory P. Smith | 2012-01-30 | 1 | -4/+5 |
| | | | | | | | | | | | | | | | | being read from the header vs the values being used by fseek and ftell (Py_ssize_t for those) and how they are computed. Py_ssize_t is used for actual file offsets so that files greater than 2gigs could be supported. Updates the Py_BuildValue format string to match (including several existing wrong 'i's that should have been 'l's). | ||||
* | | Issue #13848: open() and the FileIO constructor now check for NUL characters ↵ | Antoine Pitrou | 2012-01-29 | 1 | -22/+11 |
| | | | | | | | | | | | | in the file name. Patch by Hynek Schlawack. | ||||
* | | Issue #13806: The size check in audioop decompression functions was too ↵ | Antoine Pitrou | 2012-01-28 | 1 | -3/+3 |
| | | | | | | | | | | | | strict and could reject valid compressed data. Patch by Oleg Plakhotnyuk. | ||||
* | | Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV ↵ | Antoine Pitrou | 2012-01-27 | 1 | -2/+4 |
|\ \ | |/ | | | | | attack countermeasure. | ||||
| * | Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV ↵ | Antoine Pitrou | 2012-01-27 | 1 | -1/+2 |
| | | | | | | | | attack countermeasure. | ||||
* | | - Issue #13840: Fix ctypes.create_string_buffer exception message and docs. | Meador Inge | 2012-01-26 | 1 | -1/+1 |
| | | |||||
* | | merge heads | Benjamin Peterson | 2012-01-24 | 1 | -11/+0 |
|\ \ | |||||
| * | | Issue #13772: In os.symlink() under Windows, do not try to guess the link | Antoine Pitrou | 2012-01-24 | 1 | -11/+0 |
| | | | | | | | | | | | | | | | target's type (file or directory). The detection was buggy and made the call non-atomic (therefore prone to race conditions). | ||||
* | | | fix declaration style | Benjamin Peterson | 2012-01-23 | 1 | -24/+31 |
|/ / | |||||
* | | Fix FreeBSD, NetBSD and OpenBSD behavior of the issue #8052 fix. | Gregory P. Smith | 2012-01-22 | 1 | -9/+47 |
| | | |||||
* | | Another issue #8052 bugfix (related to previous commit). | Gregory P. Smith | 2012-01-21 | 1 | -4/+2 |
| | | | | | | | | "oops" while rearranging the #defines. | ||||
* | | Bugfix for issue #8052 fix on *BSD variants. | Gregory P. Smith | 2012-01-21 | 1 | -9/+13 |
| | | | | | | | | | | Many lack readdir64, use readdir. Only use readdir64 on solaris where it is required to work around a solaris bug. | ||||
* | | Fixes issue #8052: The posix subprocess module's close_fds behavior was | Gregory P. Smith | 2012-01-21 | 1 | -35/+258 |
| | | | | | | | | | | | | | | | | suboptimal by closing all possible file descriptors rather than just the open ones in the child process before exec(). It now closes only the open fds when it is possible to safely determine what those are. | ||||
* | | Avoid the compiler warning about the unused return value. | Gregory P. Smith | 2012-01-21 | 1 | -6/+9 |
| | | |||||
* | | Fix the _io module leaking references when a sub-interpreter is created. | Antoine Pitrou | 2012-01-18 | 1 | -48/+36 |
| | | |||||
* | | #13665: s/string/bytes/ in error message. | Ezio Melotti | 2012-01-18 | 1 | -1/+1 |
| | | |||||
* | | Test running of code in a sub-interpreter | Antoine Pitrou | 2012-01-17 | 1 | -0/+27 |
| | | | | | | | | (prelude to issue #6531). | ||||
* | | Issue #9975: socket: Fix incorrect use of flowinfo and scope_id. Patch by | Charles-François Natali | 2012-01-02 | 1 | -8/+21 |
| | | | | | | | | Vilmos Nebehaj. | ||||
* | | Don't redefine _GNU_SOURCE if it's already defined. | Ross Lagerwall | 2011-12-22 | 1 | -2/+2 |
| | | |||||
* | | Issue #11006: Don't issue low level warning in subprocess when pipe2() fails. | Ross Lagerwall | 2011-12-22 | 1 | -6/+0 |
| | | |||||
* | | Handle correctly _Py_fopen() error: don't replace the exception | Victor Stinner | 2011-12-18 | 1 | -3/+5 |
| | | |||||
* | | Issue #13530: Document os.lseek() result | Victor Stinner | 2011-12-17 | 1 | -1/+2 |
| | | | | | | | | Patch written by Jérémy Anger. | ||||
* | | Issue #10951: Fix a compiler warning in timemodule.c | Victor Stinner | 2011-12-17 | 1 | -0/+4 |
| | | |||||
* | | main() now displays an error message before exiting if a command line argument | Victor Stinner | 2011-12-16 | 1 | -1/+5 |
| | | | | | | | | cannot be decoded | ||||
* | | Issue #10350: Read and save errno before calling a function which might ↵ | Antoine Pitrou | 2011-12-16 | 5 | -11/+27 |
| | | | | | | | | | | | | overwrite it. Original patch by Hallvard B Furuseth. | ||||
* | | Issue #4028: Make multiprocessing build on SunOS. | Charles-François Natali | 2011-12-14 | 1 | -1/+1 |
| | | |||||
* | | Issue #13505: Make pickling of bytes object compatible with Python 2. | Alexandre Vassalotti | 2011-12-13 | 1 | -13/+45 |
| | | | | | | | | Initial patch by sbt. | ||||
* | | Fix docstring typo. | Florent Xicluna | 2011-12-09 | 1 | -1/+1 |
| | | |||||
* | | Issue #5905: time.strftime() is now using the locale encoding, instead of | Victor Stinner | 2011-12-09 | 1 | -9/+4 |
| | | | | | | | | UTF-8, if the wcsftime() function is not available. | ||||
* | | Issue #13415: Test in configure if unsetenv() has a return value or not. | Charles-François Natali | 2011-11-27 | 1 | -0/+6 |
| | | |||||
* | | decref correct object | Benjamin Peterson | 2011-11-23 | 1 | -1/+1 |
| | | |||||
* | | plug refleak | Benjamin Peterson | 2011-11-23 | 1 | -1/+3 |
| | | |||||
* | | Issue #13458: Fix a memory leak in the ssl module when decoding a ↵ | Antoine Pitrou | 2011-11-23 | 1 | -0/+1 |
| | | | | | | | | | | | | certificate with a subjectAltName. Patch by Robert Xiao. | ||||
* | | Issue #13415: os.unsetenv() doesn't ignore errors anymore. | Victor Stinner | 2011-11-22 | 1 | -17/+11 |
| | | |||||
* | | Issue #13093: Fix error handling on PyUnicode_EncodeDecimal() | Victor Stinner | 2011-11-22 | 1 | -2/+49 |
| | | | | | | | | | | * Add tests for PyUnicode_EncodeDecimal() and PyUnicode_TransformDecimalToASCII() * Remove the unused "e" variable in replace() |