Commit graph

16629 commits

Author SHA1 Message Date
Benjamin Peterson
e1bd38c03c fix integer overflow in unicode case operations (closes #22643) 2014-10-15 11:47:36 -04:00
Benjamin Peterson
bbd0a323ae clear BufferedRWPair weakrefs on deallocation (closes #22517) 2014-09-29 22:46:57 -04:00
Senthil Kumaran
e025b52db0 Issue #22419: Limit the length of incoming HTTP request in wsgiref server to 65536 bytes. 2014-09-17 16:29:29 +08:00
Senthil Kumaran
2a42a0bff3 Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all interfaces. 2014-09-17 13:17:58 +08:00
Antoine Pitrou
7d0b8f95e7 Lax cookie parsing in http.cookies could be a security issue when combined
with non-standard cookie handling in some Web browsers.

Reported by Sergey Bobrov.
2014-09-17 00:23:55 +02:00
Ned Deily
217f4cd7ee Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435.  Patch by Zach Byrne.
2014-07-12 22:12:39 -07:00
Ned Deily
915a30fb0d Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435.  Patch by Zach Byrne.
2014-07-12 22:06:26 -07:00
Benjamin Peterson
0fd3972a3f merge 3.2 2014-06-16 23:16:06 -07:00
Benjamin Peterson
314dc126ce expect the correct platform-dependent linesep 2014-06-16 23:15:50 -07:00
Benjamin Peterson
6cd1954c5c merge 3.2 (#21766) 2014-06-14 18:40:10 -07:00
Benjamin Peterson
73b8b1cdb8 url unquote the path before checking if it refers to a CGI script (closes #21766) 2014-06-14 18:36:29 -07:00
Benjamin Peterson
156285c35f merge 3.2 2014-04-13 22:28:16 -04:00
Benjamin Peterson
99b5afab74 in scan_once, prevent the reading of arbitrary memory when passed a negative index
Bug reported by Guido Vranken.
2014-04-13 22:10:38 -04:00
Benjamin Peterson
4717e2112b merge 3.2 (#21082) 2014-04-01 19:17:57 -04:00
Benjamin Peterson
ee5f1c13d1 remove directory mode check from makedirs (closes #21082) 2014-04-01 19:13:18 -04:00
Benjamin Peterson
b25e3f9e6a merge 3.2 2014-03-31 13:46:26 -04:00
Benjamin Peterson
b4be376d16 use https docs url (#21115) 2014-03-31 13:44:53 -04:00
Ned Deily
b454742c64 Issue #20939: Fix test_geturl failure in test_urllibnet due to
new redirect of http://www.python.org/ to https://www.python.org.
2014-03-15 13:15:31 -07:00
R David Murray
fdbe918eb0 #20933: At least one place maps 'test' to 'localhost'...fix test.
Discovery and patch by Wenzhu Man.  University of Waterloo apparently
maps the local name 'test' to localhost, which is in the bypass list,
causing the test to fail.  So change 'test' to a name unlikely to get
mapped to localhost.
2014-03-15 12:00:14 -04:00
Benjamin Peterson
d0fc83d5eb merge 3.2 (#20896) 2014-03-12 18:10:47 -05:00
Benjamin Peterson
cf25c5caae use ssl.PROTOCOL_SSLv23 for maximum compatibility (closes #20896) 2014-03-12 18:05:53 -05:00
Benjamin Peterson
bb185ab332 use support.rmtree instead of shutil (closes #19614)
Patch by Sean Rodman.
2014-03-12 15:07:01 -05:00
Ned Deily
6120739f0c Issue #20875: Prevent possible gzip "'read' is not defined" NameError.
Patch by Claudiu Popa.
2014-03-09 14:44:34 -07:00
Serhiy Storchaka
ccdf352370 Issue #20283: RE pattern methods now accept the string keyword parameters
as documented.  The pattern and source keyword parameters are left as
deprecated aliases.
2014-03-06 11:28:32 +02:00
Kristján Valur Jónsson
25dded041f Make the various iterators' "setstate" sliently and consistently clip the
index.  This avoids the possibility of setting an iterator to an invalid
state.
2014-03-05 13:47:57 +00:00
Kristján Valur Jónsson
4ca688edeb Fix pickling of rangeiter. rangeiter_setstate would not allow setting it
to the exhausted state.
2014-03-04 23:19:24 +00:00
Serhiy Storchaka
682ea5f70e Correct comments and improve failure reports in test_fileinput (closes #20501).
Thanks Vajrasky Kok and Zachary Ware.
2014-03-03 21:17:17 +02:00
Georg Brandl
2fc8f773e1 Issue #20404: reject non-text encodings early in TextIOWrapper. 2014-03-02 09:18:31 +01:00
Georg Brandl
2658bad090 merge 3.3.5rc1 release commits with 3.3 branch 2014-03-02 08:54:15 +01:00
Benjamin Peterson
659a6f562b fix test_posix.test_initgroups to work without supplemental groups (closes #20249) 2014-03-01 19:14:12 -05:00
Benjamin Peterson
b77bf32685 fix test on debug builds (closes #20731) 2014-03-01 10:31:36 -05:00
Brett Cannon
298bb96776 Issue #20778: Fix modulefinder to work with bytecode-only modules.
Bug filed and initial attempt at a patch by Bohuslav Kabrda.
2014-02-28 10:44:45 -05:00
Martin v. Löwis
815b41b1cd Issue #20731: Properly position in source code files even if they
are opened in text mode. Patch by Serhiy Storchaka.
2014-02-28 15:27:29 +01:00
Terry Jan Reedy
9db1ab8250 Issue #20567: Delete class attribute gui widgets in idle tests.
Code patch by Serhiy Storchaka
2014-02-27 18:47:49 -05:00
Antoine Pitrou
b807577da2 Issue #20791: copy.copy() now doesn't make a copy when the input is a bytes object. Initial patch by Peter Otten. 2014-02-27 22:14:31 +01:00
Benjamin Peterson
3673670b67 fix importlib test failure when bytecode writing is disabled (closes #20796)
Patch by Berker Peksag.
2014-02-27 13:49:34 -05:00
Serhiy Storchaka
517b74734a Added tests for issue #20501. 2014-02-26 20:59:43 +02:00
Serhiy Storchaka
94ee389308 Issue #19619: Blacklist non-text codecs in method API
str.encode, bytes.decode and bytearray.decode now use an
internal API to throw LookupError for known non-text encodings,
rather than attempting the encoding or decoding operation and
then throwing a TypeError for an unexpected output type.

The latter mechanism remains in place for third party non-text
encodings.

Backported changeset d68df99d7a57.
2014-02-24 14:43:03 +02:00
Terry Jan Reedy
9dc3a36c84 Issue #9974: When untokenizing, use row info to insert backslash+newline.
Original patches by A. Kuchling and G. Rees (#12691).
2014-02-23 23:33:08 -05:00
Terry Jan Reedy
938ba685dc Issue #20750, Enable roundtrip tests for new 5-tuple untokenize. The
constructed examples and all but 7 of the test/test_*.py files (run with -ucpu)
pass. Remove those that fail the new test from the selection list.
Patch partly based on patches by G. Brandl (#8478) and G. Rees (#12691).
2014-02-23 18:00:31 -05:00
Antoine Pitrou
220cc21cec Issue #20743: Fix a reference leak in test_tcl. 2014-02-23 19:39:06 +01:00
Georg Brandl
89e5671be7 #20719: Disable the robotparser python.org test until the gzip encoding issue can be sorted. 2014-02-23 08:45:15 +01:00
Victor Stinner
1be39e5154 Issue #20571: skip test_readline() of test_codecs for Windows code page 65001.
The decoder does not support partial decoding yet for this code page.
2014-02-09 13:11:53 +01:00
Benjamin Peterson
a96fd48298 merge 3.2 (#20695) 2014-02-19 23:06:24 -05:00
Benjamin Peterson
1b94030b37 update logo url (#20695) 2014-02-19 22:55:16 -05:00
Benjamin Peterson
f6218a2191 open retrieved file in binary mode, since it's now compressed 2014-02-19 22:56:35 -05:00
Serhiy Storchaka
2bb6c358e8 Merge heads 2014-02-19 19:03:58 +02:00
Zachary Ware
1f9e601765 Issue #20510: Confirm that the code attribute of the SystemExit
exception raised by sys.exit is None when no code is given.

As suggested by Serhiy Storchaka.
2014-02-19 10:44:47 -06:00
Serhiy Storchaka
162c477f41 Issue #20672: Fixed tests for TarFile.list() on non-UTF-8 locales. 2014-02-19 18:44:12 +02:00
Zachary Ware
cefe6b34de Issue #20510: Rewrote test_exit in test_sys to match existing comments
and to modernize.  Patch by Gareth Rees.
2014-02-18 08:39:04 -06:00