Matthias Klose
b8ec8a48ec
- expat: Fix DoS via malformed XML (CVE-2009-3720).
2010-01-21 17:43:31 +00:00
Matthias Klose
166f80860e
- Fix DoS via XML document with malformed UTF-8 sequences (CVE_2009_3560).
2010-01-21 17:41:47 +00:00
Philip Jenvey
4c9c260c1a
#6990 : clear threading.local's key only after its thread state is removed:
...
fixes local subclasses leaving old state around after a ref cycle GC which
could be recycled by new locals
(backported from r75123)
2009-09-29 05:30:42 +00:00
Martin v. Löwis
710fb8bf45
Issue #1040026 : Fix os.times result on systems where HZ is incorrect.
2008-12-13 15:14:30 +00:00
Martin v. Löwis
8a64048a22
Backport of r64212
...
Issue #1683 : prevent forking from interfering in threading storage.
2008-12-13 14:59:04 +00:00
Martin v. Löwis
46d410616d
Issue #4228 : Pack negative values the same way as 2.4
...
in struct's L format.
2008-12-13 14:34:06 +00:00
Amaury Forgeot d'Arc
ef633d7c5d
#4317 : Fix an Array Bounds Read in imageop.rgb2rgb8.
...
Backport of r67266
2008-11-18 22:35:48 +00:00
Benjamin Peterson
6f08e85ad9
backport r67077 from the trunk: parser module now correctly validates relative imports
2008-11-03 15:19:35 +00:00
Amaury Forgeot d'Arc
3b335ff340
Issue #4176 : Pickle would crash the interpreter when a __reduce__ function
...
does not return an iterator for the 4th and 5th items.
(sequence-like and mapping-like state)
Backport of r67049.
2008-10-30 21:40:05 +00:00
Thomas Heller
3e06faec4f
Modify ctypes types with 'official' functions. Backport from trunk,
...
snv rev 59943 and 59946.
2008-10-18 21:33:44 +00:00
Gerhard Häring
f80527679b
Issue #4046 : Backport of issue #3312 's patch: fixes two crashes in the sqlite3
...
module.
2008-10-08 08:45:16 +00:00
Brett Cannon
bab0f2ff66
Fix a refleak introduced by r66678 (backport of r66700).
2008-09-30 17:47:50 +00:00
Benjamin Peterson
833beab0e6
backport r66689: imageop could segfault due to poor argument validation
2008-09-30 01:46:48 +00:00
Thomas Heller
a702fd537d
Fix issue #3547 for MingW, update comments (backport from trunk).
2008-09-29 20:04:02 +00:00
Brett Cannon
70f1192dfc
Backport of r66677: _lsprof crasher when a bad external timer is used during
...
garbage collection of a Profiler object.
2008-09-29 03:57:24 +00:00
Thomas Heller
8e97ea9c6b
Fix issue #3547 : ctypes is confused by bitfields of varying integer types
...
Reviewed by Fredrik Lundh and Skip Montanaro.
Backport from trunk.
2008-09-24 19:00:21 +00:00
Benjamin Peterson
c610afbca4
backport r66496: integer overflow in _hashopenssl #3886
2008-09-18 01:27:26 +00:00
Guido van Rossum
4df1b6d478
Issue 1179: [CVE-2007-4965] Integer overflow in imageop module.
...
Also fixes rgbimg module (just before it is removed from 2.6).
2008-08-19 20:57:46 +00:00
Gregory P. Smith
7a076bed4c
Backport of r64767 from trunk
...
Fixes Issue #3309 : Fix bz2.BZFile iterator to release its internal lock
properly when raising an exception due to the bz2file being closed.
Prevents a deadlock.
2008-08-17 23:06:19 +00:00
Hirokazu Yamamoto
50c6072fc0
Backport r65745: Issue #2222 : Fixed reference leak when occured
...
os.rename() fails unicode conversion on 2nd parameter. (windows only)
2008-08-17 09:39:06 +00:00
Georg Brandl
e71268f93f
#3205 : bz2 iterator fails silently on MemoryError
...
(backport from r65609)
2008-08-12 08:47:02 +00:00
Gregory P. Smith
03e5182dca
(backport of r61652 and r61665 from trunk)
...
Issue #1471 : Arguments to fcntl.ioctl are no longer broken on 64-bit OpenBSD
and similar platforms due to sign extension.
2008-08-04 00:45:34 +00:00
Neal Norwitz
4f3be8a0a9
Security patches from Apple: prevent int overflow when allocating memory
2008-07-31 17:08:14 +00:00
Neal Norwitz
83ac0144fa
Backport code from r65182:
...
Issue #2620 : Overflow checking when allocating or reallocating memory
was not always being done properly in some python types and extension
modules. PyMem_MALLOC, PyMem_REALLOC, PyMem_NEW and PyMem_RESIZE have
all been updated to perform better checks and places in the code that
would previously leak memory on the error path when such an allocation
failed have been fixed.
2008-07-28 05:06:20 +00:00
Amaury Forgeot d'Arc
b15bdf7f7a
#Issue3088 in-progress: Race condition with instances of classes derived from threading.local:
...
When a thread touches such an object for the first time, a new thread-local __dict__ is created,
and the __init__ method is run.
But a thread switch can occur here; if the other thread touches the same object, it installs another
__dict__; when the first thread resumes, it updates the dictionary of the second...
This is the deep cause of the failures in test_multiprocessing involving "managers" objects.
Backport of r64601.
2008-07-01 20:59:49 +00:00
