Barry Warsaw [Thu, 15 Mar 2012 00:10:41 +0000 (17:10 -0700)]
- Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash
table internal to the pyexpat module's copy of the expat library to avoid a
denial of service due to hash collisions. Patch by David Malcolm with some
modifications by the expat project.
Barry Warsaw [Tue, 21 Feb 2012 01:42:21 +0000 (20:42 -0500)]
- Issue #13703: oCERT-2011-003: add -R command-line option and PYTHONHASHSEED
environment variable, to provide an opt-in way to protect against denial of
service attacks due to hash collisions within the dict and set types. Patch
by David Malcolm, based on work by Victor Stinner.
Barry Warsaw [Mon, 23 May 2011 19:22:56 +0000 (15:22 -0400)]
Replay changeset 70238:03e488b5c009 from fubar branch. Original commit
message:
Reconcile with the 2.6svn branch. The 2.6.7 release will be made from
Subversion, but there were differences, so this brings them in sync. These
changes should *not* propagate to any newer versions.
Martin v. Löwis [Mon, 21 Mar 2011 09:30:07 +0000 (10:30 +0100)]
Set subversion version identification to empty strings if this is not a subversion
checkout (but a mercurial one). Closes #11579. Closes #11421.
Patch by Senthil Kumaran.
Merged revisions 87442 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k
........
r87442 | alexander.belopolsky | 2010-12-22 21:27:37 -0500 (Wed, 22 Dec 2010) | 1 line
Issue #10254: Fixed a crash and a regression introduced by the implementation of PRI 29.
........
................
r87543 | alexander.belopolsky | 2010-12-28 11:04:06 -0500 (Tue, 28 Dec 2010) | 1 line
Merged revisions 84097,84099 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k
........
r84097 | florent.xicluna | 2010-08-16 20:41:19 +0200 (lun., 16 août 2010) | 1 line
Use test.support and unittest features. Fix duplicated test (bad merge in r79033). Fix comment for issue #7902.
........
r84099 | florent.xicluna | 2010-08-16 21:03:05 +0200 (lun., 16 août 2010) | 1 line
I get it wrong in r84097: s/relative/absolute/
........
................
Add test case for the HTTPResponse being an iterable. Follow-up of issue #4608.
........
r83838 | florent.xicluna | 2010-08-08 20:03:44 +0200 (dim., 08 août 2010) | 2 lines
Issue #7564: Skip test_ioctl if another process is attached to /dev/tty.
........
r83859 | florent.xicluna | 2010-08-09 00:07:16 +0200 (lun., 09 août 2010) | 2 lines
Fix #8530: Prevent stringlib fastsearch from reading beyond the front of an array.
........
r83878 | florent.xicluna | 2010-08-09 10:29:08 +0200 (lun., 09 août 2010) | 1 line
Merge the 2to3 script from /sandbox/trunk/2to3/2to3, revision 72867 (latest).
........
................
r83907 | florent.xicluna | 2010-08-09 22:29:44 +0200 (lun., 09 août 2010) | 27 lines
Missed the svnmerge property on r83902.
Recorded merge of revisions 83833,83838-83839,83859,83878 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k
Add test case for the HTTPResponse being an iterable. Follow-up of issue #4608.
........
r83838 | florent.xicluna | 2010-08-08 20:03:44 +0200 (dim., 08 août 2010) | 2 lines
Issue #7564: Skip test_ioctl if another process is attached to /dev/tty.
........
r83859 | florent.xicluna | 2010-08-09 00:07:16 +0200 (lun., 09 août 2010) | 2 lines
Fix #8530: Prevent stringlib fastsearch from reading beyond the front of an array.
........
r83878 | florent.xicluna | 2010-08-09 10:29:08 +0200 (lun., 09 août 2010) | 1 line
Merge the 2to3 script from /sandbox/trunk/2to3/2to3, revision 72867 (latest).
........
................
Fix test for xml.etree when using a non-ascii path. And use check_warnings instead of catch_warnings.
........
r79537 | florent.xicluna | 2010-03-31 23:40:32 +0200 (mer., 31 mars 2010) | 2 lines
Backport some robotparser test and skip the test if the external resource is not available.
........
r80411 | florent.xicluna | 2010-04-23 19:59:10 +0200 (ven., 23 avril 2010) | 2 lines
Remove ImportWarnings filters. They become obsolete after r79310, issue #8205.
........
r80412 | florent.xicluna | 2010-04-23 20:10:12 +0200 (ven., 23 avril 2010) | 2 lines
Fix the "regrtest -s" switch.
........
r81140 | florent.xicluna | 2010-05-13 19:05:29 +0200 (jeu., 13 mai 2010) | 3 lines
Add sensible information about the OS X platform to diagnose issue #8423:
test_pep277 fails on "x86 Tiger" buildbot but not on "PPC Tiger".
........
r81141 | florent.xicluna | 2010-05-13 20:16:06 +0200 (jeu., 13 mai 2010) | 2 lines
Revert the additional OS X information (r81140). Keep the endianness information.
........
r81149 | florent.xicluna | 2010-05-13 23:40:01 +0200 (jeu., 13 mai 2010) | 2 lines
Better test skipping, with message in the log.
........
r81150 | florent.xicluna | 2010-05-13 23:41:05 +0200 (jeu., 13 mai 2010) | 2 lines
Improve test feedback to troubleshoot issue #8423 on OS X.
........
r81151 | florent.xicluna | 2010-05-14 01:46:48 +0200 (ven., 14 mai 2010) | 2 lines
Revert changeset r81150 which helped diagnose issue #8423 on some OS X buildbot.
........
r82056 | florent.xicluna | 2010-06-17 22:30:56 +0200 (jeu., 17 juin 2010) | 2 lines
Add few words about test.test_genericpath.CommonTest
........