Commit Graph

11245 Commits

Author SHA1 Message Date
Christian Heimes
d988f429fe Issues #27850 and #27766: Remove 3DES from ssl default cipher list and add ChaCha20 Poly1305. 2016-09-06 20:06:47 +02:00
Christian Heimes
c2fc7c4f53 Issue #26470: Port ssl and hashlib module to OpenSSL 1.1.0. 2016-09-05 23:37:13 +02:00
Benjamin Peterson
aa187c6878 rewrite unpack_add_info, so it has less memory corruption bugs (closes #27944) 2016-09-05 12:44:38 -07:00
Mark Dickinson
e6239a3ab3 Issue #27934: Use float.__repr__ instead of plain repr when JSON-encoding an instance of a float subclass. Thanks Eddie James. 2016-09-03 17:45:00 +01:00
Steve Dower
0ca4b6f5a6 Issue #27888: Prevent Windows installer from displaying console windows and failing when pip cannot be installed/uninstalled. 2016-09-01 11:21:56 -07:00
Mark Dickinson
02c0c0b6e7 Issue #27870: A left shift of zero by a large integer no longer attempts to allocate large amounts of memory. 2016-08-29 19:38:12 +01:00
Serhiy Storchaka
e63af905a4 Issue #27861: Fixed a crash in sqlite3.Connection.cursor() when a factory
creates not a cursor.  Patch by Xiang Zhang.
2016-08-29 14:29:55 +03:00
Martin Panter
eac40fdf72 Issue #19884: Avoid spurious output on OS X with Gnu Readline
Also adjust the test condition, because enable-meta-key was only added in
6.1, not 6.0.
2016-08-27 02:54:43 +00:00
Berker Peksag
dc60c75aee Issue #10513: Fix a regression in Connection.commit()
Statements should not be reset after a commit.

Backported from 029050896b
2016-08-26 22:19:05 +03:00
R David Murray
8578316697 # 2466: ismount now recognizes mount points user can't access.
Patch by Robin Roth, backport by Xiang Zhang.
2016-08-23 12:30:28 -04:00
Mark Dickinson
89446b2c91 Issue #25604: Fix bug in integer true division that could have resulted in off-by-one-ulp results in unusual cases. 2016-08-21 10:59:48 +01:00
Terry Jan Reedy
7ff1b62df0 Fix typo in IDLE News. 2016-08-21 00:18:49 -04:00
Terry Jan Reedy
7a2a586a52 Add 2.7.13 IDLE NEWS and idlelib/NEWS.txt items. 2016-08-20 21:40:55 -04:00
Martin Panter
99496760c7 Fix some spelling errors 2016-08-20 08:00:53 +00:00
Benjamin Peterson
aed5a4ee73 rearrange methodcaller_new so that the main error case does not cause uninitialized memory usage (closes #27783) 2016-08-16 23:35:35 -07:00
Benjamin Peterson
0f3596a136 do not decref value borrowed from list (closes #27774) 2016-08-15 22:01:41 -07:00
Benjamin Peterson
505989c0e7 fail when negative values are passed to instr() 2016-08-15 21:40:14 -07:00
Ned Deily
b97001ef46 Issue #10910: Update FreedBSD version checks for the ctype UTF-8 workaround.
The original problem has been fixed in newer versions of FreeBSD.
Patch by Dimitry Andric of the FreeBSD project.
2016-08-15 03:04:36 -04:00
Benjamin Peterson
6c08d9628a fix possible integer overflow in binascii.b2a_qp (closes #27760)
Reported by Thomas E. Hybel
2016-08-13 18:33:33 -07:00
Benjamin Peterson
f670120cb7 do not allow reading negative values with getstr() 2016-08-13 18:15:28 -07:00
Benjamin Peterson
d81ad0df71 check for overflow in join_append_data (closes #27758)
Reported by Thomas E. Hybel
2016-08-13 17:17:06 -07:00
Benjamin Peterson
04a5385353 fix possible overflow in encode_basestring_ascii (#23369) 2016-08-13 16:47:25 -07:00
Martin Panter
3d36f0f712 Spelling and grammar fixes in code comments and documentation 2016-07-28 02:37:04 +00:00
Martin Panter
bc82de084c Issue #27641: Comment out regeneration rules when cross compiling 2016-07-29 05:52:32 +00:00
Senthil Kumaran
75d7b615ba Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue reported and patch contributed by Rémi Rampin.
2016-07-30 05:49:53 -07:00