Guido van Rossum 4df1b6d478 Issue 1179: [CVE-2007-4965] Integer overflow in imageop module. ...

Also fixes rgbimg module (just before it is removed from 2.6).

2008-08-19 20:57:46 +00:00

..

_ctypes

Issue #2682: ctypes callback functions no longer contain a cyclic

2008-04-25 19:55:19 +00:00

_sqlite

#3157: Fix docstrings for cursor methods.

2008-06-22 18:31:30 +00:00

cjkcodecs

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

expat

Handle failures from lookup.

2006-08-13 18:12:26 +00:00

zlib

Remove unneeded directories.

2006-01-03 06:48:38 +00:00

_bisectmodule.c

More unconsting.

2006-02-27 17:20:04 +00:00

_bsddb.c

fix issue2858: potential memory corruption when any of the bsddb.db.*

2008-05-17 06:46:39 +00:00

_codecsmodule.c

Klocwork made another run and found a bunch more problems.

2006-08-12 01:43:40 +00:00

_csv.c

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

_curses_panel.c

Coverity-found bug: don't use temp->next *before* checking it for NULL. Also

2006-03-07 13:38:14 +00:00

_cursesmodule.c

#1940: make it possible to use curses.filter() before curses.initscr()

2008-01-26 14:03:51 +00:00

_elementtree.c

SF#1534630

2006-08-16 16:47:07 +00:00

_functoolsmodule.c

Apply modified version of Collin Winter's patch #1478788

2006-05-29 12:43:05 +00:00

_hashopenssl.c

Make use of METH_O and METH_NOARGS where possible.

2006-05-29 21:04:52 +00:00

_heapqmodule.c

Also make _heapq.nlargest() use Py_ssize_t instead of ints, to iter over

2006-02-16 19:21:53 +00:00

_hotshot.c

Klocwork made another run and found a bunch more problems.

2006-08-12 01:43:40 +00:00

_localemodule.c

- Fix an off-by-one bug in locale.strxfrm().

2007-04-03 04:39:34 +00:00

_lsprof.c

Backport of r58004.

2007-09-06 08:35:34 +00:00

_randommodule.c

Bug #1486663: don't reject keyword arguments for subclasses of builtin

2007-01-21 10:28:56 +00:00

_sre.c

Backport r59862 (issue #712900): make long regexp matches interruptable

2008-02-04 22:00:35 +00:00

_ssl.c

#1494314: Fix a regression with high-numbered sockets in 2.4.3. This

2006-07-11 02:04:09 +00:00

_struct.c

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

_testcapimodule.c

Patch #1733960: Allow T_LONGLONG to accept ints.

2007-06-09 08:01:33 +00:00

_tkinter.c

Fix bug #1301 -- a bad assert in _tkinter.

2008-01-03 23:52:04 +00:00

_typesmodule.c

Patch #1520294: Support for getset and member descriptors in types.py,

2006-07-27 23:43:15 +00:00

_weakref.c

_PyWeakref_GetWeakrefCount() now returns a Py_ssize_t instead of long.

2006-08-02 06:14:22 +00:00

addrinfo.h

Add comments at end of every #endif and fix ones already there when for closing

2004-07-10 19:30:39 +00:00

almodule.c

Backport code from r65182:

2008-07-28 05:06:20 +00:00

ar_beos

…

arraymodule.c

Backport code from r65182:

2008-07-28 05:06:20 +00:00

audioop.c

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

binascii.c

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

bsddbmodule.c

Merge ssize_t branch.

2006-02-15 17:27:45 +00:00

bz2module.c

Backport of r64767 from trunk

2008-08-17 23:06:19 +00:00

cdmodule.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

cgen.py

Whitespace normalization, via reindent.py.

2004-07-18 06:16:08 +00:00

cgensupport.c

…

cgensupport.h

…

clmodule.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

cmathmodule.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

collectionsmodule.c

issue 2045: Infinite recursion when printing a subclass of defaultdict,

2008-02-08 01:05:21 +00:00

config.c.in

Patch #1520294: Support for getset and member descriptors in types.py,

2006-07-27 23:43:15 +00:00

cPickle.c

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

cryptmodule.c

Patch #1516912: improve Modules support for OpenVMS.

2006-07-10 01:18:57 +00:00

cStringIO.c

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

cstubs

…

datetimemodule.c

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

dbmmodule.c

Make use of METH_O and METH_NOARGS where possible.

2006-05-29 21:04:52 +00:00

dlmodule.c

Patch #1516912: improve Modules support for OpenVMS.

2006-07-10 01:18:57 +00:00

errnomodule.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

fcntlmodule.c

(backport of r61652 and r61665 from trunk)

2008-08-04 00:45:34 +00:00

flmodule.c

Convert more modules to METH_VARARGS.

2006-05-29 21:58:42 +00:00

fmmodule.c

Convert fmmodule to METH_VARARGS.

2006-05-29 13:53:16 +00:00

fpectlmodule.c

Patch #1516912: improve Modules support for OpenVMS.

2006-07-10 01:18:57 +00:00

fpetestmodule.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

gc_weakref.txt

SF 1055820: weakref callback vs gc vs threads

2004-10-30 23:09:22 +00:00

gcmodule.c

Security patches from Apple: prevent int overflow when allocating memory

2008-07-31 17:08:14 +00:00

gdbmmodule.c

Make use of METH_O and METH_NOARGS where possible.

2006-05-29 21:04:52 +00:00

getaddrinfo.c

…

getbuildinfo.c

backport change 55821 to release25-maint

2007-06-07 23:56:18 +00:00

getnameinfo.c

…

getpath.c

Patch #1516912: improve Modules support for OpenVMS.

2006-07-10 01:18:57 +00:00

glmodule.c

…

grpmodule.c

Move over to use of METH_O and METH_NOARGS.

2006-05-25 22:00:14 +00:00

imageop.c

Issue 1179: [CVE-2007-4965] Integer overflow in imageop module.

2008-08-19 20:57:46 +00:00

imgfile.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

itertoolsmodule.c

Backport r61286 adding GC to the grouper for itertools.groupby() fixing Issue 2246.

2008-03-06 22:58:42 +00:00

ld_so_aix

SF Bug # 941346, AIX shared library fix

2005-10-03 03:57:09 +00:00

ld_so_beos

…

linuxaudiodev.c

Compilation problem caused by conflicting typedefs for uint32_t

2006-10-04 10:23:57 +00:00

main.c

Backport #1442: report exception when startup file cannot be run.

2008-03-29 01:50:46 +00:00

makesetup

Patch #786737: Allow building in a tree of symlinks pointing to

2007-09-05 11:47:22 +00:00

makexp_aix

- Changes donated by Elemental Security to make it work on AIX 5.3

2005-09-14 18:09:42 +00:00

mathmodule.c

Whoops.

2006-05-29 22:00:30 +00:00

md5.c

Added checks for integer overflows, contributed by Google. Some are

2008-02-14 11:26:18 +00:00

md5.h

- Patch #360466: Replace the MD5 implementation from RSA Data Security Inc

2006-04-03 16:27:50 +00:00

md5module.c

- Patch #360466: Replace the MD5 implementation from RSA Data Security Inc

2006-04-03 16:27:50 +00:00

mmapmodule.c

Security patches from Apple: prevent int overflow when allocating memory

2008-07-31 17:08:14 +00:00

nismodule.c

Revert backwards-incompatible const changes.

2006-02-27 16:46:16 +00:00

operator.c

Patch #1654417: make operator.{get,set,del}slice use the full range

2007-03-06 19:00:09 +00:00

ossaudiodev.c

Compilation problem caused by conflicting typedefs for uint32_t

2006-10-04 10:23:57 +00:00

parsermodule.c

Replace PyObject_CallFunction calls with only object args

2006-05-25 19:15:31 +00:00

posixmodule.c

Backport r65745: Issue #2222: Fixed reference leak when occured

2008-08-17 09:39:06 +00:00

puremodule.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

pwdmodule.c

Initialize structseq types only once.

2006-04-16 18:55:50 +00:00

pyexpat.c

- back out Expat change; the final fix to Expat will be different

2006-07-06 05:13:22 +00:00

python.c

…

readline.c

[Bug #1552726] Avoid unnecessary polling at the interpreter prompt when certain versions of readline are being used

2007-01-22 16:10:27 +00:00

resource.c

Make use of METH_O and METH_NOARGS where possible.

2006-05-29 21:04:52 +00:00

rgbimgmodule.c

Issue 1179: [CVE-2007-4965] Integer overflow in imageop module.

2008-08-19 20:57:46 +00:00

rotatingtree.c

randombits(): Stop compiler warning about mixing

2006-02-15 03:01:30 +00:00

rotatingtree.h

Fix comment typo

2006-04-22 01:58:40 +00:00

selectmodule.c

Backport code from r65182:

2008-07-28 05:06:20 +00:00

Setup.config.in

…

Setup.dist

Bug #1535081: A leading underscore has been added to the names of

2006-08-06 07:26:21 +00:00

sgimodule.c

…

sha256module.c

Make use of METH_O and METH_NOARGS where possible.

2006-05-29 21:04:52 +00:00

sha512module.c

Make use of METH_O and METH_NOARGS where possible.

2006-05-29 21:04:52 +00:00

shamodule.c

Make use of METH_O and METH_NOARGS where possible.

2006-05-29 21:04:52 +00:00

signalmodule.c

Backport patch #1643738.

2007-12-10 23:03:55 +00:00

socketmodule.c

Backport 54594:

2007-03-31 18:56:11 +00:00

socketmodule.h

Patch #1544279: Improve thread-safety of the socket module by moving

2006-12-03 11:24:00 +00:00

spwdmodule.c

v is already checked for NULL, so just DECREF it

2006-08-02 06:15:10 +00:00

sre_constants.h

…

sre.h

Impl ssize_t

2006-06-12 03:05:40 +00:00

stropmodule.c

Security patches from Apple: prevent int overflow when allocating memory

2008-07-31 17:08:14 +00:00

sunaudiodev.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

svmodule.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

symtablemodule.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

syslogmodule.c

Make use of METH_O and METH_NOARGS where possible.

2006-05-29 21:04:52 +00:00

termios.c

Check return result from Py_InitModule*(). This API can fail.

2006-01-19 06:09:39 +00:00

testcapi_long.h

…

threadmodule.c

#Issue3088 in-progress: Race condition with instances of classes derived from threading.local:

2008-07-01 20:59:49 +00:00

timemodule.c

Backport of fix for issue 1695.

2007-12-24 20:00:42 +00:00

timing.h

Remove the advertising clause from the BSD license in timing.h.

2008-04-01 23:59:06 +00:00

timingmodule.c

…

tkappinit.c

Remove warning about implicit declaration of strcmp()

2004-06-13 20:29:55 +00:00

unicodedata_db.h

Update Unicode database to Unicode 4.1.

2006-03-09 23:38:20 +00:00

unicodedata.c

Bug #1704793: Raise KeyError if unicodedata.lookup cannot

2007-07-28 07:01:43 +00:00

unicodename_db.h

Update Unicode database to Unicode 4.1.

2006-03-09 23:38:20 +00:00

xxmodule.c

Move test code out of xxmodule and into _testcapimodule.c where it belongs.

2006-03-15 05:43:10 +00:00

xxsubtype.c

remove forward declarations. No constructors to move for these files. Makes

2006-04-12 04:29:01 +00:00

yuv.h

…

yuvconvert.c

…

zipimport.c

It's very unlikely, though possible that source is not a string. Verify

2006-08-13 18:12:03 +00:00

zlibmodule.c

Merge r62235 from trunk.

2008-04-09 00:26:44 +00:00