summaryrefslogtreecommitdiffstats
path: root/Modules
Commit message (Collapse)AuthorAgeFilesLines
* Fixes Issue 14234: fix for the previous commit, keep compilation whenGregory P. Smith2012-03-152-0/+7
| | | | | using --with-system-expat working when the system expat does not have salted hash support.
* Transplant from main repo d6c197edd99b: Fixes Issue #14234: CVE-2012-0876: ↵Georg Brandl2012-03-154-59/+130
| | | | Randomize hashes of xml attributes
* merge with 3.2Georg Brandl2012-02-211-3/+3
|\
| * Remove reST markup from --help output. Also: O(n**2) is dict construction, ↵Georg Brandl2012-02-211-3/+3
| | | | | | | | not single insertion.
* | Fix test failure in test_cmd_line by initializing the hash secret at the ↵Antoine Pitrou2012-02-211-2/+28
| | | | | | | | earliest point.
* | merge 3.2Benjamin Peterson2012-02-211-0/+1
|\ \ | |/
| * ensure no one tries to hash things before the random seed is foundBenjamin Peterson2012-02-211-0/+1
| |
* | sqlite3: Fix 64-bit integer handling in user functions on 32-bit architecturesPetri Lehtinen2012-02-211-6/+2
| | | | | | | | Closes #8033.
* | Merge from 3.1: Issue #13703: add a way to randomize the hash values of ↵Georg Brandl2012-02-203-110/+38
|\ \ | |/ | | | | | | | | | | | | | | basic types (str, bytes, datetime) in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated. The environment variable PYTHONHASHSEED and the new command line flag -R control this behavior.
| * Issue #13703: add a way to randomize the hash values of basic types (str, ↵Georg Brandl2012-02-203-108/+37
| | | | | | | | | | | | | | | | | | bytes, datetime) in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated. The environment variable PYTHONHASHSEED and the new command line flag -R control this behavior.
* | Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert().Antoine Pitrou2012-02-151-9/+14
| |
* | Issue #13015: Fix a possible reference leak in defaultdict.__repr__.Antoine Pitrou2012-02-151-1/+3
| | | | | | | | Patch by Suman Saha.
* | Issue #10811: Fix recursive usage of cursors. Instead of crashing, raise a ↵Petri Lehtinen2012-02-062-10/+20
| | | | | | | | ProgrammingError now.
* | Issue #13817: After fork(), reinit the ad-hoc TLS implementation earlier to fixCharles-François Natali2012-02-021-1/+3
| | | | | | | | | | a random deadlock when fork() is called in a multithreaded process in debug mode, and make PyOS_AfterFork() more robust.
* | sqlite3: Handle strings with embedded zeros correctlyPetri Lehtinen2012-02-012-8/+9
| | | | | | | | Closes #13676.
* | Fix zip_import.c's read_directory() to use appropriate types for the valuesGregory P. Smith2012-01-301-4/+5
| | | | | | | | | | | | | | | | being read from the header vs the values being used by fseek and ftell (Py_ssize_t for those) and how they are computed. Py_ssize_t is used for actual file offsets so that files greater than 2gigs could be supported. Updates the Py_BuildValue format string to match (including several existing wrong 'i's that should have been 'l's).
* | Issue #13848: open() and the FileIO constructor now check for NUL characters ↵Antoine Pitrou2012-01-291-22/+11
| | | | | | | | | | | | in the file name. Patch by Hynek Schlawack.
* | Issue #13806: The size check in audioop decompression functions was too ↵Antoine Pitrou2012-01-281-3/+3
| | | | | | | | | | | | strict and could reject valid compressed data. Patch by Oleg Plakhotnyuk.
* | Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV ↵Antoine Pitrou2012-01-271-2/+4
|\ \ | |/ | | | | attack countermeasure.
| * Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV ↵Antoine Pitrou2012-01-271-1/+2
| | | | | | | | attack countermeasure.
* | - Issue #13840: Fix ctypes.create_string_buffer exception message and docs.Meador Inge2012-01-261-1/+1
| |
* | merge headsBenjamin Peterson2012-01-241-11/+0
|\ \
| * | Issue #13772: In os.symlink() under Windows, do not try to guess the linkAntoine Pitrou2012-01-241-11/+0
| | | | | | | | | | | | | | | target's type (file or directory). The detection was buggy and made the call non-atomic (therefore prone to race conditions).
* | | fix declaration styleBenjamin Peterson2012-01-231-24/+31
|/ /
* | Fix FreeBSD, NetBSD and OpenBSD behavior of the issue #8052 fix.Gregory P. Smith2012-01-221-9/+47
| |
* | Another issue #8052 bugfix (related to previous commit).Gregory P. Smith2012-01-211-4/+2
| | | | | | | | "oops" while rearranging the #defines.
* | Bugfix for issue #8052 fix on *BSD variants.Gregory P. Smith2012-01-211-9/+13
| | | | | | | | | | Many lack readdir64, use readdir. Only use readdir64 on solaris where it is required to work around a solaris bug.
* | Fixes issue #8052: The posix subprocess module's close_fds behavior wasGregory P. Smith2012-01-211-35/+258
| | | | | | | | | | | | | | | | suboptimal by closing all possible file descriptors rather than just the open ones in the child process before exec(). It now closes only the open fds when it is possible to safely determine what those are.
* | Avoid the compiler warning about the unused return value.Gregory P. Smith2012-01-211-6/+9
| |
* | Fix the _io module leaking references when a sub-interpreter is created.Antoine Pitrou2012-01-181-48/+36
| |
* | #13665: s/string/bytes/ in error message.Ezio Melotti2012-01-181-1/+1
| |
* | Test running of code in a sub-interpreterAntoine Pitrou2012-01-171-0/+27
| | | | | | | | (prelude to issue #6531).
* | Issue #9975: socket: Fix incorrect use of flowinfo and scope_id. Patch byCharles-François Natali2012-01-021-8/+21
| | | | | | | | Vilmos Nebehaj.
* | Don't redefine _GNU_SOURCE if it's already defined.Ross Lagerwall2011-12-221-2/+2
| |
* | Issue #11006: Don't issue low level warning in subprocess when pipe2() fails.Ross Lagerwall2011-12-221-6/+0
| |
* | Handle correctly _Py_fopen() error: don't replace the exceptionVictor Stinner2011-12-181-3/+5
| |
* | Issue #13530: Document os.lseek() resultVictor Stinner2011-12-171-1/+2
| | | | | | | | Patch written by Jérémy Anger.
* | Issue #10951: Fix a compiler warning in timemodule.cVictor Stinner2011-12-171-0/+4
| |
* | main() now displays an error message before exiting if a command line argumentVictor Stinner2011-12-161-1/+5
| | | | | | | | cannot be decoded
* | Issue #10350: Read and save errno before calling a function which might ↵Antoine Pitrou2011-12-165-11/+27
| | | | | | | | | | | | overwrite it. Original patch by Hallvard B Furuseth.
* | Issue #4028: Make multiprocessing build on SunOS.Charles-François Natali2011-12-141-1/+1
| |
* | Issue #13505: Make pickling of bytes object compatible with Python 2.Alexandre Vassalotti2011-12-131-13/+45
| | | | | | | | Initial patch by sbt.
* | Fix docstring typo.Florent Xicluna2011-12-091-1/+1
| |
* | Issue #5905: time.strftime() is now using the locale encoding, instead ofVictor Stinner2011-12-091-9/+4
| | | | | | | | UTF-8, if the wcsftime() function is not available.
* | Issue #13415: Test in configure if unsetenv() has a return value or not.Charles-François Natali2011-11-271-0/+6
| |
* | decref correct objectBenjamin Peterson2011-11-231-1/+1
| |
* | plug refleakBenjamin Peterson2011-11-231-1/+3
| |
* | Issue #13458: Fix a memory leak in the ssl module when decoding a ↵Antoine Pitrou2011-11-231-0/+1
| | | | | | | | | | | | certificate with a subjectAltName. Patch by Robert Xiao.
* | Issue #13415: os.unsetenv() doesn't ignore errors anymore.Victor Stinner2011-11-221-17/+11
| |
* | Issue #13093: Fix error handling on PyUnicode_EncodeDecimal()Victor Stinner2011-11-221-2/+49
| | | | | | | | | | * Add tests for PyUnicode_EncodeDecimal() and PyUnicode_TransformDecimalToASCII() * Remove the unused "e" variable in replace()