From: Serhiy Storchaka <storchaka@gmail.com>
Date: Mon, 29 Jun 2015 18:18:01 +0000 (+0300)
Subject: Issue #24467: Fixed possible buffer over-read in bytearray. The bytearray
X-Git-Tag: v3.5.0b3~34
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=bc9e75ed023ff03f555682e57d25fee32e6548a0;p=python

Issue #24467: Fixed possible buffer over-read in bytearray. The bytearray
object now always allocates place for trailing null byte and it's buffer now
is always null-terminated.
---

bc9e75ed023ff03f555682e57d25fee32e6548a0
diff --cc Misc/NEWS
index dc2af32e0b,9d8f1e8b81..12633e22f0
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@@ -10,83 -10,10 +10,87 @@@ Release date: 2015-07-0
  Core and Builtins
  -----------------
  
+ - Issue #24467: Fixed possible buffer over-read in bytearray. The bytearray
+   object now always allocates place for trailing null byte and it's buffer now
+   is always null-terminated.
+ 
 +- Upgrade to Unicode 8.0.0.
 +
 +- Issue #24345: Add Py_tp_finalize slot for the stable ABI.
 +
 +- Issue #24400: Introduce a distinct type for PEP 492 coroutines; add
 +  types.CoroutineType, inspect.getcoroutinestate, inspect.getcoroutinelocals;
 +  coroutines no longer use CO_GENERATOR flag; sys.set_coroutine_wrapper
 +  works only for 'async def' coroutines; inspect.iscoroutine no longer
 +  uses collections.abc.Coroutine, it's intended to test for pure 'async def'
 +  coroutines only; add new opcode: GET_YIELD_FROM_ITER; fix generators wrapper
 +  used in types.coroutine to be instance of collections.abc.Generator.
 +
 +Library
 +-------
 +
 +- Issue #20387: Restore semantic round-trip correctness in tokenize/untokenize
 +  for tab-indented blocks.
 +
 +- Issue #24456: Fixed possible buffer over-read in adpcm2lin() and lin2adpcm()
 +  functions of the audioop module.
 +
 +- Issue #24336: The contextmanager decorator now works with functions with
 +  keyword arguments called "func" and "self".  Patch by Martin Panter.
 +
 +- Issue #24522: Fix possible integer overflow in json accelerator module.
 +
 +- Issue #24489: ensure a previously set C errno doesn't disturb cmath.polar().
 +
 +- Issue #24408: Fixed AttributeError in measure() and metrics() methods of
 +  tkinter.Font.
 +
 +- Issue #14373: C implementation of functools.lru_cache() now can be used with
 +  methods.
 +
 +- Issue #8232: webbrowser support incomplete on Windows. Patch by Brandon
 +  Milam
 +
 +- Issue #24347: Set KeyError if PyDict_GetItemWithError returns NULL.
 +
 +- Issue #24348: Drop superfluous incref/decref.
 +
 +- Issue #24359: Check for changed OrderedDict size during iteration.
 +
 +- Issue #24368: Support keyword arguments in OrderedDict methods.
 +
 +- Issue #24362: Simplify the C OrderedDict fast nodes resize logic.
 +
 +- Issue #24377: Fix a ref leak in OrderedDict.__repr__.
 +
 +- Issue #24369: Defend against key-changes during iteration.
 +
 +Tests
 +-----
 +
 +- Issue #24373: _testmultiphase and xxlimited now use tp_traverse and
 +  tp_finalize to avoid reference leaks encountered when combining tp_dealloc
 +  with PyType_FromSpec (see issue #16690 for details)
 +
 +Documentation
 +-------------
 +
 +- Issue #24351: Clarify what is meant by "identifier" in the context of
 +  string.Template instances.
 +
 +
 +What's New in Python 3.5.0 beta 2?
 +==================================
 +
 +Release date: 2015-05-31
 +
 +Core and Builtins
 +-----------------
 +
 +- Issue #24284: The startswith and endswith methods of the str class no longer
 +  return True when finding the empty string and the indexes are completely out
 +  of range.
 +
  - Issue #24115: Update uses of PyObject_IsTrue(), PyObject_Not(),
    PyObject_IsInstance(), PyObject_RichCompareBool() and _PyDict_Contains()
    to check for and handle errors correctly.