summaryrefslogtreecommitdiffstats
path: root/Modules
Commit message (Collapse)AuthorAgeFilesLines
* [3.4] bpo-31170: Fix inclusion of expat in Windows build projects (#3785)Victor Stinner2017-11-291-9/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * bpo-31170: Fix inclusion of expat in Windows build projects Co-Authored-By: Steve Dower <steve.dower@microsoft.com> * expat: Fix compilation on Visual Studio 2010 The standard header stdbool.h is not available with old Visual Studio compilers Cherry-picked from libexpat commit b4b89c2ab0cc5325a41360c25ef9d2ccbe617e5c. expat: Add artificial scopes in xmltok.c utf8_toUtf8() to fix c89 compilation. Cherry-picked from libexpat commit e0b290eb3d8f4c4b45137a7d7f4f8db812145bd2 * Expat: fix preprocessor defines in VS projects Remove the following defines: * BYTEORDER=1234 * HAVE_MEMMOVE * USE_PYEXPAT_CAPI * XML_CONTEXT_BYTES=1024 * XML_DTD * XML_NS * XML_STATIC * PCbuild/pyexpat.vcxproj: define _CRT_SECURE_NO_WARNINGS
* [3.4][Security] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3353)Victor Stinner2017-09-2420-153/+1281
| | | | | | | | | | | | | * bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 * Upgrade libexpat embedded copy from version 2.2.1 to 2.2.3 to get security fixes. * Update libexpat from 2.2.3 to 2.2.4. Fix copying of partial characters for UTF-8 input (libexpat bug 115): https://github.com/libexpat/libexpat/issues/115 * Define XML_POOR_ENTROPY when compiling expat
* bpo-29169: Update zlib to 1.2.11 (#3107)Victor Stinner2017-08-1628-1176/+2105
| | | | | Python 3.4 backport: convert the Misc/NEWS entry using blurb. (cherry picked from commit 34e7e2ecb1741850190e78f42875480693d3537b)
* [3.4] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) ↵Victor Stinner2017-07-1215-608/+1375
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (#2203) * bpo-29591: Upgrade Modules/expat to libexpat 2.2 (#2164) * bpo-29591: Upgrade Modules/expat to libexpat 2.2 * bpo-29591: Restore Python changes on expat * bpo-29591: Remove expat config of unsupported platforms Remove the configuration (Modules/expat/*config.h) of unsupported platforms: * Amiga * MacOS Classic on PPC32 * Open Watcom * bpo-29591: Remove useless XML_HAS_SET_HASH_SALT The XML_HAS_SET_HASH_SALT define of Modules/expat/expat.h became useless since our local expat copy was upgrade to expat 2.1 (it's now expat 2.2.0). (cherry picked from commit 23ec4b57e1359f9c539b8defc317542173ae087e) * bpo-30694: Upgrade Modules/expat/ to libexpat 2.2.1 (#2300) New file: Modules/expat/siphash.h. (cherry picked from commit 5ff7132313eb651107b179d20218dfe5d4e47f13) * bpo-30726: PCbuild _elementtree: remove duplicate defines (#2348) bpo-30726, bpo-29591: libexpat 2.2.1 of Modules/expat/ now uses a winconfig.h configuration file which already defines: * XML_NS * XML_DTD * BYTEORDER=1234 * XML_CONTEXT_BYTES=1024 * HAVE_MEMMOVE Remove these defines from PCbuild/_elementtree.vcxproj to prevent compiler warnings. Co-Authored-By: Jeremy Kloth <jeremy.kloth@gmail.com> (cherry picked from commit c8fb58bd7917151e63398587a7fc2126db7c26de) * bpo-30726: Fix elementtree warnings on Windows due to expat upgrade (#2319) * bpo-30726: Fix elementtree warnings on Windows Caused by usage of `getenv` which should be safe. And a few integer truncations which should also be ok. * bpo-30726: Don't ignore libexpat warnings which haypo intends to fix upstream (cherry picked from commit 87c65550730a8f85ce339ba197bce4fb7e836619)
* [security][3.4] bpo-30730: Prevent environment variables injection in ↵Serhiy Storchaka2017-07-111-4/+19
| | | | | | | | | | | subprocess on Windows. (GH-2325) (#2362) * [3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) Prevent passing other invalid environment variables and command arguments.. (cherry picked from commit d174d24a5d37d1516b885dc7c82f71ecd5930700) * Update NEWS
* merge 3.3 (#27783)Benjamin Peterson2016-08-171-8/+7
|\
| * rearrange methodcaller_new so that the main error case does not cause ↵Benjamin Peterson2016-08-171-8/+7
| | | | | | | | uninitialized memory usage (closes #27783)
* | merge 3.3 (#27774)Benjamin Peterson2016-08-161-3/+1
|\ \ | |/
| * do not decref value borrowed from list (closes #27774)Benjamin Peterson2016-08-161-3/+1
| |
* | fail when negative values are passed to instr()Benjamin Peterson2016-08-161-0/+8
| |
* | merge 3.3 (closes #27760)Benjamin Peterson2016-08-141-9/+15
|\ \ | |/
| * fix possible integer overflow in binascii.b2a_qp (closes #27760)Benjamin Peterson2016-08-141-9/+16
| | | | | | | | Reported by Thomas E. Hybel
* | do not allow reading negative values with getstr()Benjamin Peterson2016-08-141-0/+8
| |
* | merge 3.3 (#27758)Benjamin Peterson2016-08-141-4/+19
|\ \ | |/
| * check for overflow in join_append_data (closes #27758)Benjamin Peterson2016-08-141-4/+19
| | | | | | | | Reported by Thomas E. Hybel
* | Issue #20160: Merged fix from 3.3.Vinay Sajip2016-08-052-2/+30
|\ \ | |/
| * Issue #20160: Handled passing of large structs to callbacks correctly.Vinay Sajip2016-08-052-2/+30
| |
* | sync ordering of stddef.h includes with expat 2.1.1Benjamin Peterson2016-06-142-4/+4
| |
* | upgrade expt to 2.1.1 (closes #26556)Benjamin Peterson2016-06-113-6/+24
| |
* | open the cert store readonlyBenjamin Peterson2016-02-181-2/+6
| | | | | | | | Patch from Chi Hsuan Yen.
* | reject negative data_sizeBenjamin Peterson2016-01-221-0/+4
| |
* | prevent buffer overflow in get_data (closes #26171)Benjamin Peterson2016-01-211-0/+5
| |
* | fix refleak in error conditionBenjamin Peterson2016-01-211-0/+1
| |
* | merge 3.3Benjamin Peterson2016-01-012-4/+0
|\ \ | |/
| * remove some copyright notices supserseded by the toplevel onesBenjamin Peterson2016-01-012-4/+0
| |
* | Issue25814: Propagate all errors from custom XML parser handlersSerhiy Storchaka2015-12-061-88/+39
| | | | | | | | in ElementTree.iterparse().
* | Issue #25764: Preserve subprocess fork exception when preexec_fn usedMartin Panter2015-11-301-17/+18
| | | | | | | | Also fix handling of failure to release the import lock.
* | Fixed reference leak when read truncated pickle.Serhiy Storchaka2015-11-301-1/+3
| |
* | Issue #19687: Fixed possible integer overflows in ElementTree.Serhiy Storchaka2015-11-251-10/+34
| | | | | | | | Based on patch by Christian Heimes.
* | Issue #25725: Fixed a reference leak in pickle.loads() when unpicklingSerhiy Storchaka2015-11-251-19/+8
| | | | | | | | invalid data including tuple instructions.
* | Issue #23914: Fixed SystemError raised by unpickler on broken pickle data.Serhiy Storchaka2015-11-231-3/+16
| |
* | Issue #25691: Fixed crash on deleting ElementTree.Element attributes.Serhiy Storchaka2015-11-231-0/+6
| |
* | Issue #19687: Fixed memory leak on failed Element slice assignment.Serhiy Storchaka2015-11-221-21/+15
| | | | | | | | Added new tests for Element slice assignments.
* | rm trailing wsBenjamin Peterson2015-11-141-1/+1
| |
* | fix possible memory lea k in _get_aia_uri (closes #25578)Benjamin Peterson2015-11-141-1/+4
| |
* | fix build with older openssl (#25569)Benjamin Peterson2015-11-141-1/+1
| |
* | Issue #25498: Fix GC crash due to ctypes objects wrapping a memoryviewMartin Panter2015-11-131-18/+38
| | | | | | | | | | This was a regression caused by revision 1da9630e9b7f. Based on patch by Eryksun.
* | always set OP_NO_SSLv3 by default (closes #25530)Benjamin Peterson2015-11-121-0/+2
| |
* | fix memory leak in _get_crl_dp (closes #25569)Benjamin Peterson2015-11-121-28/+24
| | | | | | | | Patch started by Stéphane Wirtel.
* | Issue #25523: Further a-to-an corrections.Serhiy Storchaka2015-11-022-2/+2
| |
* | Issue #25523: Correct "a" article to "an" articleMartin Panter2015-11-0213-26/+26
| | | | | | | | | | | | This changes the main documentation, doc strings, source code comments, and a couple error messages in the test suite. In some cases the word was removed or edited some other way to fix the grammar.
* | add a missing comma (closes #25371)Benjamin Peterson2015-10-111-2/+2
| |
* | Issue #22413: Document newline effect on StringIO initializer and getvalueMartin Panter2015-10-101-1/+6
| | | | | | | | Also add to comment in the C code.
* | Various minor typos in documentation and commentsMartin Panter2015-10-071-1/+1
| |
* | Issue #25290: Fix typo in csv.reader() docstringBerker Peksag2015-10-021-1/+1
| | | | | | | | Patch by Johannes Niediek.
* | Issue #25262. Added support for BINBYTES8 opcode in Python implementation ofSerhiy Storchaka2015-09-291-1/+11
| | | | | | | | | | unpickler. Highest 32 bits of 64-bit size for BINUNICODE8 and BINBYTES8 opcodes no longer silently ignored on 32-bit platforms in C implementation.
* | Closes issue #23600: Wrong results from tzinfo.fromutc().Alexander Belopolsky2015-09-281-1/+1
| |
* | Issue #25203: Failed readline.set_completer_delims() no longer left theSerhiy Storchaka2015-09-271-4/+5
| | | | | | | | module in inconsistent state.
* | fix spacingBenjamin Peterson2015-09-271-2/+2
| |
* | initialize return value to NULL to avoid compiler compliants (closes #25245)Benjamin Peterson2015-09-271-0/+1
| |