Matthias Klose 3a87f93c42 - Security Issue #2: imageop did not validate arguments correctly and could ...

segfault as a result. CVE-2008-4864.

backport r66689

2008-11-12 07:29:23 +00:00

..

cjkcodecs

Backport of r60793:

2008-03-02 19:20:32 +00:00

expat

Port of universal binary support for Mac OSX from python 2.5. This takes away

2006-10-08 17:41:25 +00:00

_bisectmodule.c

SF #1313496: bisect C replacement doesn't accept named args

2005-10-05 11:48:36 +00:00

_bsddb.c

[Backport r50783 | neal.norwitz. The bytes_left code is complicated,

2006-10-05 18:49:36 +00:00

_codecsmodule.c

[Partial backport of r51218 | neal.norwitz -- the changes to ast.c, symtable.c,

2006-10-05 18:37:08 +00:00

_csv.c

Backport of r60793:

2008-03-02 19:20:32 +00:00

_curses_panel.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

_cursesmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

_heapqmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

_hotshot.c

Patch #1540329: _hotshot.c fix backports.

2006-08-19 07:48:06 +00:00

_localemodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

_randommodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

_sre.c

[Backport r52147 | andrew.kuchling]

2006-10-05 17:30:48 +00:00

_ssl.c

Backport 50567

2006-10-10 16:20:41 +00:00

_testcapimodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

_tkinter.c

[Backport r51229 | neal.norwitz]

2006-10-03 19:02:58 +00:00

_weakref.c

Make weak references subclassable:

2004-07-02 18:57:45 +00:00

addrinfo.h

Add comments at end of every #endif and fix ones already there when for closing

2004-07-10 19:30:39 +00:00

almodule.c

Backport r65182. This change modified from using the unsigned max value

2008-07-28 05:22:45 +00:00

ar_beos

…

arraymodule.c

Backport r65182. This change modified from using the unsigned max value

2008-07-28 05:22:45 +00:00

audioop.c

Backport of r60793:

2008-03-02 19:20:32 +00:00

binascii.c

Backport of r60793:

2008-03-02 19:20:32 +00:00

bsddbmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

bz2module.c

[Partial backport of r50773 | neal.norwitz -- other parts of this patch

2006-10-05 18:22:02 +00:00

ccpython.cc

…

cdmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

cgen.py

Whitespace normalization, via reindent.py.

2004-07-18 06:16:08 +00:00

cgensupport.c

…

cgensupport.h

…

clmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

cmathmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

collectionsmodule.c

[Backport r51224 | neal.norwitz]

2006-10-05 17:22:15 +00:00

config.c.in

…

cPickle.c

Backport of r60793:

2008-03-02 19:20:32 +00:00

cryptmodule.c

…

cStringIO.c

Backport of r60793:

2008-03-02 19:20:32 +00:00

cstubs

…

datetimemodule.c

Backport of r60793:

2008-03-02 19:20:32 +00:00

dbmmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

dlmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

errnomodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

fcntlmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

flmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

fmmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

fpectlmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

fpetestmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

gc_weakref.txt

SF 1055820: weakref callback vs gc vs threads

2004-10-30 23:09:22 +00:00

gcmodule.c

Security patches from Apple: prevent int overflow when allocating memory

2008-07-31 17:04:32 +00:00

gdbmmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

getaddrinfo.c

SF #784031: Byte-order bug in socket-module getaddrinfo.c

2003-08-17 21:28:39 +00:00

getbuildinfo.c

Getting rid of all the code inside #ifdef macintosh too.

2003-11-20 01:44:59 +00:00

getnameinfo.c

…

getpath.c

Patch #931938: prevent setting sys.prefix to ""

2006-02-20 17:37:39 +00:00

glmodule.c

…

grpmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

imageop.c

- Security Issue #2: imageop did not validate arguments correctly and could

2008-11-12 07:29:23 +00:00

imgfile.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

itertoolsmodule.c

[Backport r50782 | neal.norwitz]

2006-10-03 19:22:30 +00:00

ld_so_aix

[Backport rev 39653 by nnorwitz]

2006-09-29 12:44:26 +00:00

ld_so_beos

…

linuxaudiodev.c

Compilation problem caused by conflicting typedefs for uint32_t

2006-10-04 10:23:57 +00:00

main.c

Backport 42932:

2006-03-14 06:47:07 +00:00

makesetup

…

makexp_aix

- Changes donated by Elemental Security to make it work on AIX 5.3

2005-09-14 18:15:03 +00:00

mathmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

md5.h

…

md5c.c

Patch #977074: Move Encode/Decode to the top so gcc can inline them.

2004-08-03 13:08:07 +00:00

md5module.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

mmapmodule.c

Security patches from Apple: prevent int overflow when allocating memory

2008-07-31 17:04:32 +00:00

nismodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

operator.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

ossaudiodev.c

Compilation problem caused by conflicting typedefs for uint32_t

2006-10-04 10:23:57 +00:00

parsermodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

posixmodule.c

Backport r45505, r45573, r45576

2006-10-09 19:29:06 +00:00

puremodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

pwdmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

pyexpat.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

python.c

Apparently FreeBSD enables some HW floating-point exceptions by default.

2002-12-28 21:56:08 +00:00

readline.c

[Backport r50677 | neal.norwitz]

2006-10-03 18:29:35 +00:00

regexmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

regexpr.c

…

regexpr.h

…

resource.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

rgbimgmodule.c

- Issue #1179: Fix CVE-2007-4965 and CVE-2008-1679, multiple integer

2008-11-12 06:54:33 +00:00

selectmodule.c

Backport r65182. This change modified from using the unsigned max value

2008-07-28 05:22:45 +00:00

Setup.config.in

Patch to make _codecs a builtin module. This is necessary since

2002-12-12 17:37:50 +00:00

Setup.dist

[ 959576 ] Can't build Python on POSIX w/o $HOME (backport)

2005-12-27 17:37:16 +00:00

sgimodule.c

…

shamodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

signalmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

socketmodule.c

Backport 50567

2006-10-10 16:20:41 +00:00

socketmodule.h

- Changes donated by Elemental Security to make it work on AIX 5.3

2005-09-14 18:15:03 +00:00

sre_constants.h

Implemented non-recursive SRE matching.

2003-10-17 22:13:16 +00:00

sre.h

Add weakref support to sockets and re pattern objects.

2004-05-31 03:09:25 +00:00

stropmodule.c

Security patches from Apple: prevent int overflow when allocating memory

2008-07-31 17:04:32 +00:00

structmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

sunaudiodev.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

svmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

symtablemodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

syslogmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

termios.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

testcapi_long.h

…

threadmodule.c

[Backport rev. 39012 by mwh]

2006-09-28 17:05:18 +00:00

timemodule.c

Port of universal binary support for Mac OSX from python 2.5. This takes away

2006-10-08 17:41:25 +00:00

timing.h

…

timingmodule.c

…

tkappinit.c

Remove warning about implicit declaration of strcmp()

2004-06-13 20:29:55 +00:00

unicodedata_db.h

SF #989185: Drop unicode.iswide() and unicode.width() and add

2004-08-04 07:38:35 +00:00

unicodedata.c

[Backport r51226 | neal.norwitz]

2006-10-04 13:12:26 +00:00

unicodename_db.h

- SF #962502: Add two more methods for unicode type; width() and

2004-06-02 16:49:17 +00:00

xxmodule.c

[Backport of rev. 42093 by neal.norwitz]

2006-09-27 19:17:32 +00:00

xxsubtype.c

…

yuv.h

…

yuvconvert.c

…

zipimport.c

[Backport r51252 | neal.norwitz]

2006-10-03 19:39:54 +00:00

zlibmodule.c

- Issue #2586: Fix CVE-2008-1721, zlib crash from

2008-11-12 07:02:24 +00:00