Christian Heimes [Thu, 22 Aug 2013 11:19:56 +0000 (13:19 +0200)]
Issue #18747: Use a parent atfork handler instead of a child atfork handler.
fork() is suppose to be async-signal safe but the handler calls unsafe functions. A parent handler mitigates the issue.
Christian Heimes [Thu, 22 Aug 2013 11:19:48 +0000 (13:19 +0200)]
Issue #18747: Use a parent atfork handler instead of a child atfork handler.
fork() is suppose to be async-signal safe but the handler calls unsafe functions. A parent handler mitigates the issue.
R David Murray [Thu, 22 Aug 2013 01:10:31 +0000 (21:10 -0400)]
#18324: set_payload now correctly handles binary input.
This also backs out the previous fixes for for #14360, #1717, and #16564.
Those bugs were actually caused by the fact that set_payload didn't decode to
str, thus rendering the model inconsistent. This fix does mean the data
processed by the encoder functions goes through an extra encode/decode cycle,
but it means the model is always consistent. Future API updates will provide
a better way to encode payloads, which will bypass this minor de-optimization.
Antoine Pitrou [Wed, 21 Aug 2013 22:39:46 +0000 (00:39 +0200)]
Issue #18792: Use "127.0.0.1" or "::1" instead of "localhost" as much as possible, since "localhost" goes through a DNS lookup under recent Windows versions.
Antoine Pitrou [Wed, 21 Aug 2013 22:39:46 +0000 (00:39 +0200)]
Issue #18792: Use "127.0.0.1" or "::1" instead of "localhost" as much as possible, since "localhost" goes through a DNS lookup under recent Windows versions.
Christian Heimes [Wed, 21 Aug 2013 11:26:34 +0000 (13:26 +0200)]
Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork.
A pthread_atfork() child handler is used to seeded the PRNG with pid, time
and some stack data.
Christian Heimes [Wed, 21 Aug 2013 11:26:05 +0000 (13:26 +0200)]
Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork.
A pthread_atfork() child handler is used to seeded the PRNG with pid, time
and some stack data.
Issue 18772: Restore set dummy object back to unicode and restore the identity checks in lookkey().
The Gdb prettyprint plugin depended on the dummy object being displayable.
Other solutions besides a unicode object are possible. For now, get it
back up and running.
The identity checks in lookkey() need to be there to prevent the dummy
object from leaking through Py_RichCompareBool() into user code in the
rare circumstance where the dummy's hash value exactly matches the hash
value of the actual key being looked up.
Serhiy Storchaka [Mon, 19 Aug 2013 20:04:33 +0000 (23:04 +0300)]
Issue #18647: A regular expression in the doctest module rewritten so that
determined minimal width of repeated subexpression is >0 (an empty line was
not matched in any case).
Serhiy Storchaka [Mon, 19 Aug 2013 19:59:31 +0000 (22:59 +0300)]
Issue #18647: A regular expression in the doctest module rewritten so that
determined minimal width of repeated subexpression is >0 (an empty line was
not matched in any case).
Andrew Kuchling [Mon, 19 Aug 2013 00:04:34 +0000 (20:04 -0400)]
#18445: update Tools/scripts/README.
- document abitype.py, analyze_dxp.py, get-remote-certificate.py,
import_diagnostics.py, parse_html5_entities.py.
- remove redemo.py which was moved to Tools/Demo.
- sort list into alphabetical order
Antoine Pitrou [Sat, 17 Aug 2013 18:27:56 +0000 (20:27 +0200)]
Issue #16105: When a signal handler fails to write to the file descriptor registered with ``signal.set_wakeup_fd()``, report an exception instead of ignoring the error.
Christian Heimes [Fri, 16 Aug 2013 22:58:00 +0000 (00:58 +0200)]
Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for rfc822Name (email), dNSName (DNS) and
uniformResourceIdentifier (URI).
Christian Heimes [Fri, 16 Aug 2013 22:54:47 +0000 (00:54 +0200)]
Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for rfc822Name (email), dNSName (DNS) and
uniformResourceIdentifier (URI).