Commit graph

26998 commits

Author SHA1 Message Date
Ned Deily
915a30fb0d Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435.  Patch by Zach Byrne.
2014-07-12 22:06:26 -07:00
Benjamin Peterson
314dc126ce expect the correct platform-dependent linesep 2014-06-16 23:15:50 -07:00
Benjamin Peterson
73b8b1cdb8 url unquote the path before checking if it refers to a CGI script (closes #21766) 2014-06-14 18:36:29 -07:00
Benjamin Peterson
99b5afab74 in scan_once, prevent the reading of arbitrary memory when passed a negative index
Bug reported by Guido Vranken.
2014-04-13 22:10:38 -04:00
Benjamin Peterson
ee5f1c13d1 remove directory mode check from makedirs (closes #21082) 2014-04-01 19:13:18 -04:00
Benjamin Peterson
b4be376d16 use https docs url (#21115) 2014-03-31 13:44:53 -04:00
Benjamin Peterson
cf25c5caae use ssl.PROTOCOL_SSLv23 for maximum compatibility (closes #20896) 2014-03-12 18:05:53 -05:00
Stefan Krah
d9bed99fcb Issue #20246: Fix test failures on FreeBSD. Patch by Ryan Smith-Roberts. 2014-01-21 22:58:40 +01:00
Benjamin Peterson
1b94030b37 update logo url (#20695) 2014-02-19 22:55:16 -05:00
Benjamin Peterson
f6218a2191 open retrieved file in binary mode, since it's now compressed 2014-02-19 22:56:35 -05:00
Benjamin Peterson
fbf648ebba complain when nbytes > buflen to fix possible buffer overflow (closes #20246) 2014-01-13 22:59:38 -05:00
Antoine Pitrou
f60b7df9f8 Issue #12226: HTTPS is now used by default when connecting to PyPI. 2013-12-22 01:35:53 +01:00
Georg Brandl
7b5d6adb28 Backout 265d369ad3b9. 2013-11-04 07:43:41 +01:00
Georg Brandl
7ec3e56bb8 Backout d80207d15294. 2013-11-04 07:43:32 +01:00
Jason R. Coombs
bd26d86d74 Issue #19286: [distutils] Only match files in build_py.find_data_files. 2013-11-02 11:07:35 -04:00
Jason R. Coombs
93912b9e54 Issue #19286: Adding test demonstrating the failure when a directory is found in the package_data globs. 2013-11-02 11:29:33 -04:00
Benjamin Peterson
35aca89617 merge 3.1 (#19435) 2013-10-30 12:48:59 -04:00
Benjamin Peterson
04e9de40f3 use the collapsed path in the run_cgi method (closes #19435) 2013-10-30 12:43:09 -04:00
R David Murray
58bf8d2a68 Merge #14984: only import pwd on POSIX. 2013-09-18 08:53:26 -04:00
R David Murray
505be2146f #14984: only import pwd on POSIX. 2013-09-18 08:52:38 -04:00
R David Murray
8270a2c209 Merge #14984: On POSIX, enforce permissions when reading default .netrc. 2013-09-17 20:32:54 -04:00
R David Murray
104aab956f #14984: On POSIX, enforce permissions when reading default .netrc.
Initial patch by Bruno Piguet.

This is implemented as if a useful .netrc file could exist without passwords,
which is possible in the general case; but in fact our netrc implementation
does not support it.  Fixing that issue will be an enhancement.
2013-09-17 20:30:02 -04:00
Georg Brandl
c17a8dfaca Fix tkinter regression introduced by the security fix in #16248. 2013-09-14 09:08:09 +02:00
Georg Brandl
db4309e19a Fix tkinter regression introduced by the security fix in #16248. 2013-09-14 09:08:09 +02:00
Antoine Pitrou
86d53cadda Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of service using certificates with many wildcards (CVE-2013-2099). 2013-05-18 17:56:42 +02:00
Georg Brandl
bfe36ec1f5 Bump to version 3.2.5. 2013-05-12 12:28:20 +02:00
Georg Brandl
c502df4e3e Issue #17915: Fix interoperability of xml.sax with file objects returned by
codecs.open().
2013-05-12 11:41:12 +02:00
Georg Brandl
93b061bc3e Issue #1159051: Back out a fix for handling corrupted gzip files that
broke backwards compatibility.
2013-05-12 11:29:27 +02:00
Georg Brandl
ba2f8be4c6 Issue #17843: Remove bz2 test data that triggers antivirus warnings. 2013-05-12 11:11:51 +02:00
Georg Brandl
ce654f48aa Issue #15535: Fix pickling of named tuples. 2013-05-12 11:09:11 +02:00
Serhiy Storchaka
a6df938fef Close #17666: Fix reading gzip files with an extra field. 2013-04-08 22:35:02 +03:00
Georg Brandl
8bc7e31529 Bump to 3.2.4. 2013-04-06 09:36:20 +02:00
Benjamin Peterson
7684fa8a38 close search and replace dialog after it is used (closes #17625) 2013-04-03 22:35:12 -04:00
Georg Brandl
f5390fc162 merge with last upstream doc changes in 3.2 2013-03-28 08:57:50 +01:00
Ezio Melotti
265281ac02 #17329: document unittest.SkipTest. Initial patch by Zachary Ware. 2013-03-27 20:11:55 +02:00
Georg Brandl
4eb5f1a567 merge with main repo 3.2 branch 2013-03-25 06:56:31 +01:00
Ezio Melotti
656c80809c Clean up references to threads in test_queue. 2013-03-23 23:35:06 +02:00
Gregory P. Smith
a1ed539268 Fixes issue #17488: Change the subprocess.Popen bufsize parameter default value
from unbuffered (0) to buffering (-1) to match the behavior existing code
expects and match the behavior of the subprocess module in Python 2 to avoid
introducing hard to track down bugs.
2013-03-23 11:44:25 -07:00
Georg Brandl
b673d99698 Bump to 3.2.4rc1. 2013-03-23 16:02:08 +01:00
Georg Brandl
47f2542462 Update pydoc topics. 2013-03-23 15:46:53 +01:00
Vinay Sajip
68b4cc87cd Issue #17521: Corrected non-enabling of logger following two calls to fileConfig(). 2013-03-23 11:18:45 +00:00
Vinay Sajip
3f885b5432 Issue #17508: Handled out-of-order handler configuration correctly. 2013-03-22 15:19:54 +00:00
doko@ubuntu.com
d5537d071c - Issue #16754: Fix the incorrect shared library extension on linux. Introduce
two makefile macros SHLIB_SUFFIX and EXT_SUFFIX. SO now has the value of
  SHLIB_SUFFIX again (as in 2.x and 3.1). The SO macro is removed in 3.4.
2013-03-21 13:21:49 -07:00
R David Murray
03b0116c78 #5712: Preemptively fix some other possible timing issues. 2013-03-20 22:11:40 -04:00
R David Murray
853c0f9d60 #5713: fix timing issue in smtplib tests. 2013-03-20 21:54:05 -04:00
Gregory P. Smith
1f8a40b81d remove the long obsolete mention of universal newlines mode only being
available when configured at compile time.
2013-03-20 18:32:03 -07:00
R David Murray
d312c740f1 #5713: Handle 421 error codes during sendmail by closing the socket.
This is a partial fix to the issue of servers disconnecting unexpectedly; in
this case the 421 says they are disconnecting, so we close the socket and
return the 421 in the appropriate error context.

Original patch by Mark Sapiro, updated by Kushal Das, with additional
tests by me.
2013-03-20 20:36:14 -04:00
Ezio Melotti
958f7ae865 #17493: re-enable a test on Windows. Patch by Zachary Ware. 2013-03-20 18:14:48 +02:00
Senthil Kumaran
2a4d24510a #17471 - Increasing the urllib.error test coverage. Bringing it to 100%. Based on patch contributed by Daniel Wozniak 2013-03-19 16:11:07 -07:00
Senthil Kumaran
843fae9312 #17471 - Improve urllib2 test coverage. Patch contributed by Daniel Wozniak 2013-03-19 13:43:42 -07:00