Matthias Klose
b7180a89b3
Merge r82494 from the python2.6 branch:
...
Issue #7673 : Fix security vulnerability (CVE-2010-2089) in the audioop module,
ensure that the input string length is a multiple of the frame size
2010-10-17 10:48:14 +00:00
Matthias Klose
d4367c24cd
Merge r81080 from the python2.6 branch:
...
Issue #8674 : fix another bogus overflow check in audioop module.
2010-10-17 10:34:40 +00:00
Matthias Klose
192b714f92
Merged revisions 81046 from the python2.6 branch:
...
Issue #8674 : Fix incorrect and UB-inducing overflow checks in audioop
module. Thanks Tomas Hoger for the patch.
2010-10-17 10:28:49 +00:00
Matthias Klose
b8ec8a48ec
- expat: Fix DoS via malformed XML (CVE-2009-3720).
2010-01-21 17:43:31 +00:00
Matthias Klose
166f80860e
- Fix DoS via XML document with malformed UTF-8 sequences (CVE_2009_3560).
2010-01-21 17:41:47 +00:00
Philip Jenvey
4c9c260c1a
#6990 : clear threading.local's key only after its thread state is removed:
...
fixes local subclasses leaving old state around after a ref cycle GC which
could be recycled by new locals
(backported from r75123)
2009-09-29 05:30:42 +00:00
Martin v. Löwis
710fb8bf45
Issue #1040026 : Fix os.times result on systems where HZ is incorrect.
2008-12-13 15:14:30 +00:00
Martin v. Löwis
8a64048a22
Backport of r64212
...
Issue #1683 : prevent forking from interfering in threading storage.
2008-12-13 14:59:04 +00:00
Martin v. Löwis
46d410616d
Issue #4228 : Pack negative values the same way as 2.4
...
in struct's L format.
2008-12-13 14:34:06 +00:00
Amaury Forgeot d'Arc
ef633d7c5d
#4317 : Fix an Array Bounds Read in imageop.rgb2rgb8.
...
Backport of r67266
2008-11-18 22:35:48 +00:00
Benjamin Peterson
6f08e85ad9
backport r67077 from the trunk: parser module now correctly validates relative imports
2008-11-03 15:19:35 +00:00
Amaury Forgeot d'Arc
3b335ff340
Issue #4176 : Pickle would crash the interpreter when a __reduce__ function
...
does not return an iterator for the 4th and 5th items.
(sequence-like and mapping-like state)
Backport of r67049.
2008-10-30 21:40:05 +00:00
Thomas Heller
3e06faec4f
Modify ctypes types with 'official' functions. Backport from trunk,
...
snv rev 59943 and 59946.
2008-10-18 21:33:44 +00:00
Gerhard Häring
f80527679b
Issue #4046 : Backport of issue #3312 's patch: fixes two crashes in the sqlite3
...
module.
2008-10-08 08:45:16 +00:00
Brett Cannon
bab0f2ff66
Fix a refleak introduced by r66678 (backport of r66700).
2008-09-30 17:47:50 +00:00
Benjamin Peterson
833beab0e6
backport r66689: imageop could segfault due to poor argument validation
2008-09-30 01:46:48 +00:00
Thomas Heller
a702fd537d
Fix issue #3547 for MingW, update comments (backport from trunk).
2008-09-29 20:04:02 +00:00
Brett Cannon
70f1192dfc
Backport of r66677: _lsprof crasher when a bad external timer is used during
...
garbage collection of a Profiler object.
2008-09-29 03:57:24 +00:00
Thomas Heller
8e97ea9c6b
Fix issue #3547 : ctypes is confused by bitfields of varying integer types
...
Reviewed by Fredrik Lundh and Skip Montanaro.
Backport from trunk.
2008-09-24 19:00:21 +00:00
Benjamin Peterson
c610afbca4
backport r66496: integer overflow in _hashopenssl #3886
2008-09-18 01:27:26 +00:00
Guido van Rossum
4df1b6d478
Issue 1179: [CVE-2007-4965] Integer overflow in imageop module.
...
Also fixes rgbimg module (just before it is removed from 2.6).
2008-08-19 20:57:46 +00:00
Gregory P. Smith
7a076bed4c
Backport of r64767 from trunk
...
Fixes Issue #3309 : Fix bz2.BZFile iterator to release its internal lock
properly when raising an exception due to the bz2file being closed.
Prevents a deadlock.
2008-08-17 23:06:19 +00:00
Hirokazu Yamamoto
50c6072fc0
Backport r65745: Issue #2222 : Fixed reference leak when occured
...
os.rename() fails unicode conversion on 2nd parameter. (windows only)
2008-08-17 09:39:06 +00:00
Georg Brandl
e71268f93f
#3205 : bz2 iterator fails silently on MemoryError
...
(backport from r65609)
2008-08-12 08:47:02 +00:00
Gregory P. Smith
03e5182dca
(backport of r61652 and r61665 from trunk)
...
Issue #1471 : Arguments to fcntl.ioctl are no longer broken on 64-bit OpenBSD
and similar platforms due to sign extension.
2008-08-04 00:45:34 +00:00
