Barry Warsaw [Fri, 23 Aug 2013 17:26:49 +0000 (13:26 -0400)]
- Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for `rfc822Name` (email), `dNSName` (DNS) and
`uniformResourceIdentifier` (URI).
Christian Heimes [Thu, 22 Aug 2013 11:19:48 +0000 (13:19 +0200)]
Issue #18747: Use a parent atfork handler instead of a child atfork handler.
fork() is suppose to be async-signal safe but the handler calls unsafe functions. A parent handler mitigates the issue.
Antoine Pitrou [Wed, 21 Aug 2013 22:39:46 +0000 (00:39 +0200)]
Issue #18792: Use "127.0.0.1" or "::1" instead of "localhost" as much as possible, since "localhost" goes through a DNS lookup under recent Windows versions.
Christian Heimes [Wed, 21 Aug 2013 11:26:05 +0000 (13:26 +0200)]
Issue #18747: Re-seed OpenSSL's pseudo-random number generator after fork.
A pthread_atfork() child handler is used to seeded the PRNG with pid, time
and some stack data.
Serhiy Storchaka [Mon, 19 Aug 2013 20:04:52 +0000 (23:04 +0300)]
Issue #18647: A regular expression in the doctest module rewritten so that
determined minimal width of repeated subexpression is >0 (an empty line was
not matched in any case).
Christian Heimes [Fri, 16 Aug 2013 22:54:47 +0000 (00:54 +0200)]
Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for rfc822Name (email), dNSName (DNS) and
uniformResourceIdentifier (URI).
Terry Jan Reedy [Thu, 15 Aug 2013 20:19:07 +0000 (16:19 -0400)]
Issue #18732: Remove unused* parameter output_sep from IdleHistory.History
and paired splits and joins that do nothing when output_sep is its default \n.
*It in unused in that the class in only instantiated once, with the default.
Make a few other changes in .fetch and its test.
Terry Jan Reedy [Thu, 15 Aug 2013 19:07:58 +0000 (15:07 -0400)]
Issue #18226: Fix ImportError and subsequent TypeError in 2.7 backport.
Running py27\PCbuild> python_d -m test.regrtest -ugui test_idle
ignores the exceptions and gives no indication of a problem (fixed in 3.3).
Terry Jan Reedy [Thu, 15 Aug 2013 18:31:55 +0000 (14:31 -0400)]
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Issue #18425: Unittests for idlelib.IdleHistory. First patch by R. Jayakrishnan.
Remove an unused early-out test from the critical path for
dict and set lookups.
When the strings already have matching lengths and hashes,
there is no additional information gained by checking the first
characters (the probability of a mismatch is already known to
be less than 1 in 2**64).
Terry Jan Reedy [Sat, 10 Aug 2013 20:56:20 +0000 (16:56 -0400)]
Issue #18226: Add docstrings and unittests for idlelib/FormatParagraph.py.
Move comment code to a separate function so it can be separately tested.
Original patches by Todd Rovito and Phil Webster.
The former block size traded away good fit within cache lines in
order to gain faster division in deque_item(). However, compilers
are getting smarter and can now replace the slow division operation
with a fast integer multiply and right shift. Accordingly, it makes
sense to go back to a size that lets blocks neatly fill entire
cache-lines.
GCC-4.8 and CLANG 4.0 both compute "x // 62" with something
roughly equivalent to "x * 9520900167075897609 >> 69".
Terry Jan Reedy [Sun, 28 Jul 2013 02:27:25 +0000 (22:27 -0400)]
Issue #18441: Comment out code that will not compile because the standard
library has a package, lib-tk, that cannot be imported by normal means.
Lib/test/test_tk, etc, have special code to access this package. I will not
bother with it unless the darwin check is needed before it gets moved to
test.(test-)support.py.
Terry Jan Reedy [Mon, 22 Jul 2013 00:13:24 +0000 (20:13 -0400)]
Issue #18441: Make test.support.requires('gui') skip when it should.
(Consolidating this check and various checks in tkinter files and moving them
to test.support and test.regrtest will be another issue.)