Gregory P. Smith c8ff46032f Fixes Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes ...

in the hash table internal to the pyexpat module's copy of the expat
library to avoid a denial of service due to hash collisions.
Patch by David Malcolm with some modifications by the expat project.

2012-03-14 15:28:10 -07:00

..

_ctypes

Issue #12881: ctypes: Fix segfault with large structure field names.

2011-10-03 21:34:04 -05:00

_io

Fix typo “seperator”

2012-02-26 01:41:39 +01:00

_multiprocessing

Issue #4028: Make multiprocessing build on SunOS.

2011-12-14 18:35:55 +01:00

_sqlite

sqlite3: Fix 64-bit integer handling in user functions on 32-bit architectures

2012-02-21 14:04:46 +02:00

cjkcodecs

Issue #12016: Reindent decoders of HK and JP codecs

2011-06-03 23:35:27 +02:00

expat

Fixes Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes

2012-03-14 15:28:10 -07:00

zlib

Revert typo fixes in zlib/*

2011-03-16 12:46:40 +02:00

_bisectmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

_bsddb.c

Berkeley DB: Erratic behaviour of "DBEnv->rep_elect()" because a typo

2012-01-16 23:57:34 +01:00

_codecsmodule.c

Merged revisions 79779 via svnmerge from

2010-06-09 17:55:28 +00:00

_collectionsmodule.c

Issue #13015: Fix a possible reference leak in defaultdict.__repr__.

2012-02-15 02:42:46 +01:00

_csv.c

Issue #13573: The csv.writer now uses the repr() for floats rather than str().

2011-12-11 22:31:09 -08:00

_curses_panel.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

_cursesmodule.c

Merged revisions 83306 via svnmerge from

2010-08-05 16:35:53 +00:00

_elementtree.c

Issue #2892: preserve iterparse events in case of SyntaxError

2011-11-01 23:34:41 +01:00

_functoolsmodule.c

#11565: Fix several typos. Patch by Piotr Kasprzyk.

2011-03-16 12:34:31 +02:00

_hashopenssl.c

Untabify C files. Will watch buildbots.

2010-05-09 14:46:46 +00:00

_heapqmodule.c

#11515: fix several typos. Patch by Piotr Kasprzyk.

2011-03-15 18:55:01 +02:00

_hotshot.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

_json.c

Issue #13774: json: Fix a SystemError when a bogus encoding is passed to

2012-01-13 22:53:25 +01:00

_localemodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

_lsprof.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

_math.c

Merged revisions 82607 via svnmerge from

2010-07-06 15:03:42 +00:00

_math.h

Issue #7518: Move substitute definitions of C99 math functions from

2009-12-21 15:22:00 +00:00

_randommodule.c

Merged revisions 84299 via svnmerge from

2010-08-24 18:10:46 +00:00

_sre.c

Fix Issue 12604 - Use a proper no-op macro expansion for VTRACE macro in _sre.c

2011-10-20 02:13:23 +08:00

_ssl.c

Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert().

2012-02-15 22:25:27 +01:00

_struct.c

#11515: fix several typos. Patch by Piotr Kasprzyk.

2011-03-15 18:55:01 +02:00

_testcapimodule.c

Issue #13093: Fix _testcapi.unicode_encodedecimal()

2011-11-29 00:53:09 +01:00

_tkinter.c

Remove all other uses of the C tolower()/toupper() which could break with a Turkish locale.

2011-10-04 13:55:37 +02:00

_weakref.c

…

addrinfo.h

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

almodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

ar_beos

…

arraymodule.c

Fix docstring typo.

2011-12-09 23:40:27 +01:00

audioop.c

Issue #13806: The size check in audioop decompression functions was too strict and could reject valid compressed data.

2012-01-28 22:01:59 +01:00

binascii.c

Remove all other uses of the C tolower()/toupper() which could break with a Turkish locale.

2011-10-04 13:55:37 +02:00

bsddb.h

Berkeley DB: Erratic behaviour of "DBEnv->rep_elect()" because a typo

2012-01-16 23:57:34 +01:00

bsddbmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

bz2module.c

Issue #13159: Replace FileIO's quadratic-time buffer growth algorithm with a linear-time one.

2011-10-13 13:52:46 +02:00

cdmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

cgen.py

Deprecate DEVICE, GL, gl, and the related modules cgen and cgensupport for removal in 3.0.

2008-05-15 02:33:55 +00:00

cgensupport.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

cgensupport.h

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

clmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

cmathmodule.c

#11565: Fix several typos. Patch by Piotr Kasprzyk.

2011-03-16 12:34:31 +02:00

config.c.in

Merged revisions 81602 via svnmerge from

2010-05-29 21:03:13 +00:00

cPickle.c

Issue #7689: Allow pickling of dynamically created classes when their

2011-10-04 09:34:48 +02:00

cryptmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

cStringIO.c

Issue #1548891: The cStringIO.StringIO() constructor now encodes unicode

2011-10-22 21:26:01 +02:00

cstubs

…

datetimemodule.c

Issue #11576: Fixed timedelta subtraction glitch on big timedelta values

2011-04-05 22:12:22 -04:00

dbmmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

dlmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

errnomodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

fcntlmodule.c

Merged revisions 82798,82805,83659,83977,84015,84018,84141,84264,84326-84327,84480,84482,84484,84530-84531,84553,84619,84915-84916 via svnmerge from

2010-10-06 09:28:45 +00:00

flmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

fmmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

fpectlmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

fpetestmodule.c

…

future_builtins.c

Fix issue10065 - future_builtins' docstring lacks some functions

2010-10-14 13:15:33 +00:00

gc_weakref.txt

…

gcmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

gdbmmodule.c

This reverts r63675 based on the discussion in this thread:

2008-06-09 04:58:54 +00:00

getaddrinfo.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

getbuildinfo.c

let's keep parenthesis around sizeof

2011-03-28 17:25:15 -05:00

getnameinfo.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

getpath.c

copy_absolute(): keep the relative path if getcwd() failed

2010-10-07 23:37:08 +00:00

glmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

grpmodule.c

Merged revisions 87238 via svnmerge from

2010-12-14 16:26:30 +00:00

imageop.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

imgfile.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

itertoolsmodule.c

Backport issue #12973 itertools fix from 3.x.

2011-09-24 09:01:16 +01:00

ld_so_aix.in

Small fix to ld_so_aix.in for 2.x

2010-09-10 22:22:58 +00:00

ld_so_beos

…

linuxaudiodev.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

main.c

merge with 2.6

2012-02-21 22:38:31 +01:00

makesetup

…

makexp_aix

…

mathmodule.c

Merged revisions 82221 via svnmerge from

2010-06-25 20:21:43 +00:00

md5.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

md5.h

- Issue #3745: Fix hashlib to always reject unicode and non buffer-api

2009-02-13 03:00:00 +00:00

md5module.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

mmapmodule.c

Issue 12404: Remove C89 incompatible code from mmap module.

2011-06-25 09:55:10 +02:00

nismodule.c

Merged revisions 84172 via svnmerge from

2010-08-19 09:09:04 +00:00

operator.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

ossaudiodev.c

Issue #13058: ossaudiodev: fix a file descriptor leak on error. Patch by Thomas

2011-09-29 19:43:01 +02:00

parsermodule.c

#11515: fix several typos. Patch by Piotr Kasprzyk.

2011-03-15 18:55:01 +02:00

posixmodule.c

merge 2.6 with hash randomization fix

2012-02-20 21:44:56 -05:00

puremodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

pwdmodule.c

Merged revisions 84106 via svnmerge from

2010-08-16 20:30:26 +00:00

pyexpat.c

Fixes Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes

2012-03-14 15:28:10 -07:00

python.c

…

readline.c

Merged revisions 87356 via svnmerge from

2010-12-18 03:52:09 +00:00

resource.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

rotatingtree.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

rotatingtree.h

…

selectmodule.c

Issue #12287: Fix a stack corruption in ossaudiodev module when the FD is

2011-08-28 16:22:33 +02:00

Setup.config.in

…

Setup.dist

Remove duplicate entry.

2010-08-21 11:40:30 +00:00

sgimodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

sha256module.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

sha512module.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

shamodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

signalmodule.c

Issue #13817: After fork(), reinit the ad-hoc TLS implementation earlier to fix

2012-02-02 19:57:19 +01:00

socketmodule.c

Issue #9975: socket: Fix incorrect use of flowinfo and scope_id. Patch by

2012-01-02 15:38:27 +01:00

socketmodule.h

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

spwdmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

sre_constants.h

…

sre.h

…

stropmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

sunaudiodev.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

svmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

symtablemodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

syslogmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

termios.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

testcapi_long.h

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

threadmodule.c

Fix error message to use the Python name instead of the C name

2011-05-31 14:08:40 +02:00

timemodule.c

Issue #10762: Guard against invalid/non-supported format string '%f' on Windows. Patch Santoso Wijaya.

2011-04-06 14:27:47 +08:00

timing.h

Remove the advertising clause from the BSD license in timing.h.

2008-04-01 23:57:36 +00:00

timingmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

tkappinit.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

tkinter.h

Include tkinter.h only after including tk.h (or the equivalent for another platform).

2009-04-05 02:11:19 +00:00

unicodedata_db.h

Issue #8024: Update the Unicode database to 5.2

2010-03-18 21:50:06 +00:00

unicodedata.c

Remove all other uses of the C tolower()/toupper() which could break with a Turkish locale.

2011-10-04 13:55:37 +02:00

unicodename_db.h

Issue #8024: Update the Unicode database to 5.2

2010-03-18 21:50:06 +00:00

xxmodule.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

xxsubtype.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

yuv.h

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

yuvconvert.c

Recorded merge of revisions 81029 via svnmerge from

2010-05-09 15:15:40 +00:00

zipimport.c

Issue #12124: zipimport doesn't keep a reference to zlib.decompress() anymore

2011-05-21 02:13:22 +02:00

zlibmodule.c

Issue #12839: Fix crash in zlib module due to version mismatch.

2011-08-28 11:23:57 +02:00