https://github.com/python/cpython

sort by:
Revision Author Date Message Commit Date
c912af8 Version bump and copyright year fixes for 3.4.7rc1. 24 July 2017, 01:16:33 UTC
961168d Update pydoc topics and susp-ignored for 3.4.7rc1. 24 July 2017, 01:11:33 UTC
e9a74c4 blurb release for 3.4.7rc1. 24 July 2017, 00:59:56 UTC
f067f7e Switch to using blurb to manage Misc/NEWS! 24 July 2017, 00:55:09 UTC
b154917 [3.4] Backport CI config from master (#2475) * Issues #23808, #25911: Trying to fix walk tests on Windows. On Windows a symlink can has the FILE_ATTRIBUTE_DIRECTORY flag. (cherry picked from commit 388b90f28e029daaf06aae8026b596e2f20a1cd3) * bpo-30231: Remove skipped test_imaplib tests (#1419) (#2193) The public cyrus.andrew.cmu.edu IMAP server (port 993) doesn't accept TLS connection using our self-signed x509 certificate. Remove the two tests which are already skipped. (cherry picked from commit 7895a0585b4b6a1c8082d17227307c6ce2c8bb8b) * Backport CI config from master * Add .travis.yml for Travis CI * Add .github/ for AppVeyor and CodeCov. * Travis CI: remove "make regen-all" check The regen-all Makefile rule doesn't exist in Python 3.4, only since Python 3.5 and newer (and 2.7). * appveyor: replace --slowest with --slow * Travis CI: remove the GCC coverage job * Travis CI: remove tzdata resource from regrtest tzdata resource doesn't exist in Python 3.4. * Travis CI: remove the doc job Fixing Sphinx warnings requires to backport huge intrusive changes like: - commit d97b7dc94b19063f0589d401bdc4aaadc7030762 - commit 5c6793394066b012b9674681b0815667938ce4d9 * appveyor: set version to 3.4.6+ * bpo-30730: Fix test_os tests. Fix test_invalid_cmd() and test_invalid_env(), TypeError is raised on Python 3.4. (cherry picked from commit 5e22721e586344b547194f0f7ea67fd425f94e72) 22 July 2017, 19:22:31 UTC
3b3a5a5 bpo-30939: Avoid Sphinx deprecation warning in docs build. (#2721) (#2724) (cherry picked from commit 50f58163a69abe2f35e91044d1df165ee7bdbb42) 22 July 2017, 19:18:44 UTC
34fae03 [3.4] bpo-26617: Ensure gc tracking is off when invoking weakref callbacks. (#2695) * [3.4] bpo-26617: Ensure gc tracking is off when invoking weakref callbacks. (cherry picked from commit 8f657c35b978b681e6e919f08358992e1aed7dc1) * Rewrite a NEWS entry as a NEWS.d entry. 22 July 2017, 19:07:10 UTC
6f6bc1d bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782) Based on patch by Philipp Hagemeister. This fixes a regression caused by revision f4377699fd47. (cherry picked from commit d274b3f1f1e2d8811733fb952c9f18d7da3a376a) 12 July 2017, 12:52:04 UTC
cc54c1c bpo-30500: urllib: Simplify splithost by calling into urlparse. (#1849) (#2291) The current regex based splitting produces a wrong result. For example:: http://abc#@def Web browsers parse that URL as ``http://abc/#@def``, that is, the host is ``abc``, the path is ``/``, and the fragment is ``#@def``. (cherry picked from commit 90e01e50ef8a9e6c91f30d965563c378a4ad26de) 12 July 2017, 12:51:46 UTC
71572bb [3.4] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2203) * bpo-29591: Upgrade Modules/expat to libexpat 2.2 (#2164) * bpo-29591: Upgrade Modules/expat to libexpat 2.2 * bpo-29591: Restore Python changes on expat * bpo-29591: Remove expat config of unsupported platforms Remove the configuration (Modules/expat/*config.h) of unsupported platforms: * Amiga * MacOS Classic on PPC32 * Open Watcom * bpo-29591: Remove useless XML_HAS_SET_HASH_SALT The XML_HAS_SET_HASH_SALT define of Modules/expat/expat.h became useless since our local expat copy was upgrade to expat 2.1 (it's now expat 2.2.0). (cherry picked from commit 23ec4b57e1359f9c539b8defc317542173ae087e) * bpo-30694: Upgrade Modules/expat/ to libexpat 2.2.1 (#2300) New file: Modules/expat/siphash.h. (cherry picked from commit 5ff7132313eb651107b179d20218dfe5d4e47f13) * bpo-30726: PCbuild _elementtree: remove duplicate defines (#2348) bpo-30726, bpo-29591: libexpat 2.2.1 of Modules/expat/ now uses a winconfig.h configuration file which already defines: * XML_NS * XML_DTD * BYTEORDER=1234 * XML_CONTEXT_BYTES=1024 * HAVE_MEMMOVE Remove these defines from PCbuild/_elementtree.vcxproj to prevent compiler warnings. Co-Authored-By: Jeremy Kloth <jeremy.kloth@gmail.com> (cherry picked from commit c8fb58bd7917151e63398587a7fc2126db7c26de) * bpo-30726: Fix elementtree warnings on Windows due to expat upgrade (#2319) * bpo-30726: Fix elementtree warnings on Windows Caused by usage of `getenv` which should be safe. And a few integer truncations which should also be ok. * bpo-30726: Don't ignore libexpat warnings which haypo intends to fix upstream (cherry picked from commit 87c65550730a8f85ce339ba197bce4fb7e836619) 12 July 2017, 12:41:34 UTC
f734479 [3.4] [3.5] bpo-27945: Fixed various segfaults with dict. (GH-1657) (GH-1678) (#2248) Based on patches by Duane Griffin and Tim Mitchell. (cherry picked from commit 753bca3934a7618a4fa96e107ad1c5c18633a683). (cherry picked from commit 2f7f533cf6fb57fcedcbc7bd454ac59fbaf2c655) 11 July 2017, 13:30:21 UTC
fe82c46 [security][3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) (#2362) * [3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) Prevent passing other invalid environment variables and command arguments.. (cherry picked from commit d174d24a5d37d1516b885dc7c82f71ecd5930700) * Update NEWS 11 July 2017, 10:24:10 UTC
ad1fb81 Add "Misc/NEWS.d" directory tree for "blurb". GH-2331 CPython workflow is changing! We're going to start using "blurb" to manage Misc/NEWS entries: https://github.com/python/core-workflow (This will be a big win for release managers, honest.) This checkin simply populates the "Misc/NEWS.d" subdirectory tree so that people can start putting their news entries in there. No other changes (yet). 22 June 2017, 23:00:46 UTC
fa53dbd Issues #27850 and #27766: Remove 3DES from ssl default cipher list and add ChaCha20 Poly1305. (#224) Backport: replace 3.5.3 with 3.4.7 in the doc versionchanged. (cherry picked from commit 03d13c0cbfe912eb0f9b9a02987b9e569f25fe19) 10 March 2017, 00:49:11 UTC
f37b0cb bpo-25008: Deprecate smtpd and point to aiosmtpd (#274) (#280) 24 February 2017, 20:31:48 UTC
a52b0a4 Post-release updates for 3.4.6. 17 January 2017, 08:49:13 UTC
db413f2 Added tag v3.4.6 for changeset b662f4776921 16 January 2017, 08:20:40 UTC
7f10ede Version bump for Python 3.4.6. 16 January 2017, 08:19:54 UTC
aa772e3 Merge Python 3.4.6rc1 changes back into main branch. 03 January 2017, 02:30:26 UTC
a7aa988 Post-release fixups for Python 3.4.6rc1. 03 January 2017, 02:29:26 UTC
0717564 merge 3.3 02 January 2017, 07:47:35 UTC
c276ffa ring IDLE.app into 2017, too 02 January 2017, 07:46:09 UTC
af17a2b Added tag v3.4.6rc1 for changeset e199a272ccda 02 January 2017, 06:13:29 UTC
d12551f Version bump for 3.4.6rc1. 02 January 2017, 06:12:36 UTC
8f24f66 Regenerated pydoc topics for 3.4.6rc1. (Also fixed doc error, improved build.) 02 January 2017, 06:09:46 UTC
03fdeb7 Fix test failure so it's no longer dependent on example.com. 02 January 2017, 05:49:09 UTC
b6e2142 merge 3.3 02 January 2017, 04:07:37 UTC
e527dd3 ring in 2017 for Python 02 January 2017, 04:04:13 UTC
dd5c73b Upgrade pip to 9.0.1 and setuptools to 28.8.0 16 November 2016, 02:17:43 UTC
5ca92ab Issue #28563: Make plural form selection more lenient and accepting non-integer numbers. Django tests depend on this. 14 November 2016, 17:25:56 UTC
60ac989 Issue #28563: Make plural form selection more lenient and accepting non-integer numbers. Django tests depend on this. 14 November 2016, 17:22:12 UTC
84293af Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X when decode astral characters. 12 November 2016, 12:29:48 UTC
b626643 Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X when decode astral characters. 12 November 2016, 12:28:06 UTC
1c3fdd9 Issue #28563: Fixed possible DoS and arbitrary code execution when handle plural form selections in the gettext module. The expression parser now supports exact syntax supported by GNU gettext. 08 November 2016, 19:20:09 UTC
07bcf05 Issue #28563: Fixed possible DoS and arbitrary code execution when handle plural form selections in the gettext module. The expression parser now supports exact syntax supported by GNU gettext. 08 November 2016, 19:17:46 UTC
20a587b Upgrade pip to 9.0 and setuptools to 28.7.1 02 November 2016, 19:42:49 UTC
77eede3 Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug build. 25 October 2016, 07:07:51 UTC
068534a Issue #28248: Update Windows build to use OpenSSL 1.0.2j 11 October 2016, 02:57:20 UTC
cb9424f Issue #27759: Fix selectors incorrectly retain invalid file descriptors. (Backported to 3.4 as this bug might be exploited to for DoS) 06 October 2016, 18:03:03 UTC
26d998c properly handle the single null-byte file (closes #24022) 19 September 2016, 06:41:11 UTC
354c2f9 Issue #26171: Null merge 14 September 2016, 05:38:36 UTC
d751040 Issue #26171: Prevent buffer overflow in get_data Backport of 01ddd608b85c. 14 September 2016, 05:37:28 UTC
16d7d59 Upgrade setuptools to 27.1.2 09 September 2016, 16:08:53 UTC
d25d9dc Upgrade setuptools to 27.1.1 09 September 2016, 15:35:02 UTC
1f5fd64 Issue #27960: Revert state to 675e20c38fdac6, backing out all changes by developed for Issue #12885. 06 September 2016, 02:24:01 UTC
79ae967 Issue #12885: Revert commits in 3.4 branch which is security-only fixes. 02 September 2016, 03:27:45 UTC
6f5d3fd Issue #12885: Correct issue reference in NEWS 02 September 2016, 02:08:25 UTC
8ac147d Backed out changeset cc86e9e102e8 02 September 2016, 01:55:22 UTC
97eda15 Issue #12285: Update NEWS 02 September 2016, 01:12:17 UTC
1f0e7c9 rearrange methodcaller_new so that the main error case does not cause uninitialized memory usage (closes #27783) 17 August 2016, 06:35:35 UTC
3a27b08 do not decref value borrowed from list (closes #27774) 16 August 2016, 05:01:41 UTC
4f97651 fix possible integer overflow in binascii.b2a_qp (closes #27760) Reported by Thomas E. Hybel 14 August 2016, 01:33:33 UTC
6e01d90 check for overflow in join_append_data (closes #27758) Reported by Thomas E. Hybel 14 August 2016, 00:17:06 UTC
6f25003 Issue #20160: Handled passing of large structs to callbacks correctly. 05 August 2016, 20:24:27 UTC
fb79290 Switch upload.pypi.io to upload.pypi.org 03 August 2016, 22:43:38 UTC
4cbb23f Prevent HTTPoxy attack (CVE-2016-1000110) Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin. 31 July 2016, 06:24:16 UTC
d27a7c1 Issue #27369: Merge test_pyexpat from 3.2 into 3.3 14 July 2016, 01:42:53 UTC
076ca6c Issue #27369: Don’t test error message detail that changed in Expat 2.2.0 14 July 2016, 01:31:46 UTC
2cdcaf1 Issue #22758: Move NEWS entry to Library section 14 July 2016, 01:17:03 UTC
e363894 #22758 null merge 10 July 2016, 18:10:08 UTC
5f21f43 #22758: fix regression in handling of secure cookies. This backports the fix from #16611, per discussion with the release manager. 10 July 2016, 17:32:43 UTC
188c118 Switch to the new upload url for PyPI 06 July 2016, 19:27:35 UTC
035583b Issue #25940: On Windows, connecting to port 444 returns ETIMEDOUT 15 January 2016, 01:16:41 UTC
3d81d93 Issue #25940: Use self-signed.pythontest.net in SSL tests This is instead of svn.python.org, whose certificate recently expired, and whose new certificate uses a different root certificate. The certificate used at the pythontest server was modifed to set the "basic constraints" CA flag. This flag seems to be required for test_get_ca_certs_ capath() to work (in Python 3.4+). Added the new self-signed certificate to capath with the following commands: cp Lib/test/{selfsigned_pythontestdotnet.pem,capath/} c_rehash -v Lib/test/capath/ c_rehash -v -old Lib/test/capath/ # Note the generated file names cp Lib/test/capath/{selfsigned_pythontestdotnet.pem,0e4015b9.0} mv Lib/test/capath/{selfsigned_pythontestdotnet.pem,ce7b8643.0} The new server responds with "No route to host" when connecting to port 444. 14 January 2016, 09:36:00 UTC
31b9410 Issue #25709: Fixed problem with in-place string concatenation and utf-8 cache. 02 December 2015, 23:02:03 UTC
fab75d9 Issue #25940: Merge ETIMEDOUT fix from 3.2 into 3.3 15 January 2016, 02:08:13 UTC
73f5507 Issue #25940: Merge self-signed.pythontest.net testing from 3.2 into 3.3 14 January 2016, 12:21:02 UTC
0e617e2 remove some copyright notices supserseded by the toplevel ones 01 January 2016, 17:53:47 UTC
f1dcdd9 add 2015 and 2016 01 January 2016, 17:53:14 UTC
16b347b reflow 01 January 2016, 17:12:44 UTC
75e3630 2016 will be another year of writing copyrighted code 01 January 2016, 16:23:45 UTC
14b2c82 fix reordering 05 December 2015, 08:27:11 UTC
2deaea3 merge 3.2 05 December 2015, 08:21:12 UTC
5e62117 add CVE and issue number 05 December 2015, 08:17:57 UTC
edc4b2f Issue #12285: Replace implementation of findall with implementation from Setuptools 7ce820d524db. 19 September 2015, 16:12:15 UTC
102764a Issue #25021: Correctly make sure that product.__setstate__ does not access invalid memory. 12 September 2015, 15:20:54 UTC
1a04c44 Sort result to avoid spurious errors due to order. 30 August 2015, 18:05:58 UTC
a2cf229 Add docstring and additional test revealing nuances of the implementation as found in setuptools. 19 September 2015, 15:32:51 UTC
2c5278a Add another test capturing the basic discovery expectation. 30 August 2015, 17:26:48 UTC
a0c6c1c Issue #12285: Add test capturing failure. 30 August 2015, 17:22:56 UTC
fa5e7cf Use modern mechanism for test discovery 30 August 2015, 17:13:11 UTC
a12d92b merge 3.3 (#27783) 17 August 2016, 06:36:20 UTC
10bc0f6 merge 3.3 (#27774) 16 August 2016, 05:03:44 UTC
432ea4f fail when negative values are passed to instr() 16 August 2016, 04:40:14 UTC
5e4aafa Update setuptools/pip to 25.2.0/8.1.2 14 August 2016, 20:09:56 UTC
5295532 merge 3.3 (closes #27760) 14 August 2016, 01:36:55 UTC
40a77c3 do not allow reading negative values with getstr() 14 August 2016, 01:15:28 UTC
59b6abd merge 3.3 (#27758) 14 August 2016, 00:21:22 UTC
a0b2568 Issue #20160: Merged fix from 3.3. 05 August 2016, 20:43:25 UTC
c6c2217 Merge 3.3 03 August 2016, 22:48:17 UTC
436fe5a [merge from 3.3] Prevent HTTPoxy attack (CVE-2016-1000110) Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin. 31 July 2016, 06:34:34 UTC
b7b5d35 Issue #27369: Merge test_pyexpat from 3.3 into 3.4 14 July 2016, 02:09:17 UTC
8cf1496 #22758 null merge 10 July 2016, 18:10:56 UTC
ede9a0f merge 3.3 06 July 2016, 21:04:11 UTC
ad04a85 Switch to the new upload url for PyPI 06 July 2016, 20:18:39 UTC
9105870 Merge. 27 June 2016, 02:43:00 UTC
ea68492 Post-release fixups for Python 3.4.5. 27 June 2016, 02:41:21 UTC
8e36221 Added tag v3.4.5 for changeset 619b61e505d0 25 June 2016, 21:44:49 UTC
98be9d5 Version bump for 3.4.5 final. 25 June 2016, 21:44:30 UTC
27d3529 Regenerate pydoc topics for 3.4.5 final. 25 June 2016, 21:42:04 UTC
back to top