https://github.com/python/cpython

sort by:
Revision Author Date Message Commit Date
1b293b6 Python 3.8.1 18 December 2019, 17:21:23 UTC
35acb35 bpo-38546: multiprocessing tests stop the resource tracker (GH-17641) (GH-17647) Multiprocessing and concurrent.futures tests now stop the resource tracker process when tests complete. Add ResourceTracker._stop() method to multiprocessing.resource_tracker. Add _cleanup_tests() helper function to multiprocessing.util: share code between multiprocessing and concurrent.futures tests. (cherry picked from commit 9707e8e22d80ca97bf7a9812816701cecde6d226) 18 December 2019, 09:11:05 UTC
b1f2044 [3.8] bpo-39080: Starred Expression's column offset fix when inside a CALL (GH-17645) (GH-17649) … Co-Authored-By: Pablo Galindo <Pablogsal@gmail.com> (cherry picked from commit 50d4f12958bf806a4e1a1021d70cfd5d448c5cba) Co-authored-by: Lysandros Nikolaou <lisandrosnik@gmail.com> https://bugs.python.org/issue39080 18 December 2019, 01:41:58 UTC
bf3aa10 bpo-38295: prevent test_relative_path of test_py_compile failure on macOS Catalina (GH-17636) 17 December 2019, 09:05:41 UTC
d21ad67 Fix warnings in test_asyncio.test_base_events (GH-17577) (GH-17579) Co-authored-by: tirkarthi (cherry picked from commit 1988344a6bff253f017e053f69318ecf03587294) Co-authored-by: Kyle Stanley <aeros167@gmail.com> 17 December 2019, 04:11:11 UTC
a96e938 [3.8] Add whatsnew for removal of asyncio.loop.create_datagram_endpoint()'s *reuse_address* parameter (GH-17595). (#17630) (cherry picked from commit f501db2b93a9d3d840b6fb38d6bdda8bcc400d4a) Co-authored-by: Kyle Stanley <aeros167@gmail.com> 17 December 2019, 04:01:19 UTC
8d0f369 bpo-38811: Check for presence of os.link method in pathlib (GH-17225) Commit 6b5b013bcc22 ("bpo-26978: Implement pathlib.Path.link_to (Using os.link) (GH-12990)") introduced a new link_to method in pathlib. However, this makes pathlib crash when the 'os' module is missing a 'link' method. Fix this by checking for the presence of the 'link' method on pathlib module import, and if it's not present, turn it into a runtime error like those emitted when there is no lchmod() or symlink(). Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> (cherry picked from commit 092435e932dee1802784ec28f39454f50fdd879a) Co-authored-by: Toke Høiland-Jørgensen <toke@redhat.com> 16 December 2019, 12:42:20 UTC
cd968de The comment in ast_for_namedexpr shouldn't include if_stmt (GH-17586) Automerge-Triggered-By: @gvanrossum (cherry picked from commit b08d3f71beab59653edfbbcf7b92a7bc8050d6b8) Co-authored-by: Guido van Rossum <guido@python.org> 15 December 2019, 20:04:07 UTC
5c5d8f6 bpo-39035: travis: Don't use beta group (GH-17603) 14 December 2019, 14:01:54 UTC
ce333cd Fix elif start column offset when there is an else following (GH-17596) (GH-17600) (cherry picked from commit 5936a4ce914d42af97b9238e5090dedc8d5b0bd2) Co-authored-by: Lysandros Nikolaou <lisandrosnik@gmail.com> 14 December 2019, 10:43:42 UTC
4a5db78 Add PYTHONUTF8 to commandline usage. (GH-17587) Co-Authored-By: Victor Stinner <vstinner@python.org> (cherry picked from commit 95826c773a9004fc5b3c89de55f800504685ab21) Co-authored-by: Inada Naoki <songofacandy@gmail.com> 14 December 2019, 10:38:35 UTC
aa74a53 bpo-36406: Handle namespace packages in doctest (GH-12520) (GH-17591) (cherry picked from commit 8289e27393395ee903bd096d42e07c112d7f15c6) Co-authored-by: Xtreak <tir.karthi@gmail.com> 13 December 2019, 23:30:41 UTC
3b18b17 bpo-39031: Include elif keyword when producing lineno/col-offset info for if_stmt (GH-17582) (GH-17589) When parsing an "elif" node, lineno and col_offset of the node now point to the "elif" keyword and not to its condition, making it consistent with the "if" node. https://bugs.python.org/issue39031 Automerge-Triggered-By: @pablogsal (cherry picked from commit 025a602af7ee284d8db6955c26016f3f27d35536) Co-authored-by: Lysandros Nikolaou <lisandrosnik@gmail.com> 13 December 2019, 16:21:54 UTC
b738237 bpo-39022, bpo-38594: Sync with importlib_metadata 1.3 (GH-17568) (GH-17569) * bpo-39022, bpo-38594: Sync with importlib_metadata 1.3 including improved docs for custom finders and better serialization support in EntryPoints. * 📜🤖 Added by blurb_it. * Correct module reference (cherry picked from commit b7a0109cd2bafaa21a4d50aad307e901c68f9156) Co-authored-by: Jason R. Coombs <jaraco@jaraco.com> 11 December 2019, 01:47:06 UTC
00e2fe4 bpo-39012: Fix RC version suffix for nuget release files (GH-17564) (cherry picked from commit d0802d07d2c864b95480a9b24c7cc050e19189d5) Co-authored-by: Steve Dower <steve.dower@python.org> 10 December 2019, 23:40:02 UTC
3ac65a7 [3.8] Minor fixes to the NEWS entries (GH-17557) Automerge-Triggered-By: @pablogsal 10 December 2019, 16:11:33 UTC
7c543f4 Post 3.8.1rc1 10 December 2019, 08:13:16 UTC
8129e5e Merge tag 'v3.8.1rc1' into 3.8 Python 3.8.1rc1 10 December 2019, 08:12:15 UTC
4ce626e Fix Windows release builds (GH-17550) (cherry picked from commit abdeb57a212556b4cd3568cca7d316d71a5b8cf0) Co-authored-by: Steve Dower <steve.dower@python.org> 10 December 2019, 05:28:10 UTC
859767d bpo-39002: Fix simple typo: tranlation -> translation (GH-17517) (GH-17538) (cherry picked from commit c18b805ac6a2d22176240ca93982fa1fb6559ec7) Co-authored-by: Tim Gates <tim.gates@iress.com> 10 December 2019, 01:35:25 UTC
34d5d5e bpo-38943: Fix IDLE autocomplete window not always appearing (GH-17416) This has happened on some versions of Ubuntu. (cherry picked from commit bbc4162bafe018f07bab0b624b37974cc33daad9) Co-authored-by: JohnnyNajera <58344607+JohnnyNajera@users.noreply.github.com> 10 December 2019, 00:48:20 UTC
2b2c7bf bpo-38944: Escape key now closes IDLE completion windows. (GH-17419) (cherry picked from commit 232689b40d8fcbbac27c8705607ff482ea5b46f8) Co-authored-by: JohnnyNajera <58344607+JohnnyNajera@users.noreply.github.com> 09 December 2019, 23:38:33 UTC
0ac9aae bpo-39007: Add auditing events to functions in winreg (GH-17541) Also allows winreg.CloseKey() to accept same types as other functions. (cherry picked from commit ee17e3735634c5fe15a43f897707de8011618627) Co-authored-by: Steve Dower <steve.dower@python.org> 09 December 2019, 19:36:25 UTC
c93d68b bpo-39008: Require Py_ssize_t for PySys_Audit formats rather than raise a deprecation warning (GH-17540) (cherry picked from commit b8cbe74c3498c617f0e73fd0cdc5c07f2c532092) Co-authored-by: Steve Dower <steve.dower@python.org> 09 December 2019, 19:22:30 UTC
b00a2b5 Python 3.8.1rc1 09 December 2019, 17:47:55 UTC
3c5feaf bpo-38992: avoid fsum test failure from constant-folding (GH-17513) (GH-17530) * Issue 38992: avoid fsum test failure * Add NEWS entry (cherry picked from commit bba873e633f0f1e88ea12fb935cbd58faa77f976) Co-authored-by: Mark Dickinson <mdickinson@enthought.com> 09 December 2019, 17:32:34 UTC
c5a2a97 Fix APPX registry key generation (GH-17489) (cherry picked from commit e89e159b18cc9f32a0a4a818d080eb6a63d888a7) Co-authored-by: Steve Dower <steve.dower@python.org> 09 December 2019, 17:02:22 UTC
0d57db2 bpo-34776: Fix dataclasses to support __future__ "annotations" mode (GH-9518) (#17531) (cherry picked from commit d219cc4180e7589807ebbef7421879f095e72a98) Co-authored-by: Yury Selivanov <yury@magic.io> 09 December 2019, 16:07:51 UTC
79c2974 bpo-37228: Fix loop.create_datagram_endpoint()'s usage of SO_REUSEADDR (GH-17311) (#17529) (cherry picked from commit ab513a38c98695f271e448fe2cb7c5e39eeaaaaf) Co-authored-by: Kyle Stanley <aeros167@gmail.com> 09 December 2019, 14:39:54 UTC
b22183f bpo-39006: Fix asyncio when the ssl module is missing (GH-17524) Fix asyncio when the ssl module is missing: only check for ssl.SSLSocket instance if the ssl module is available. (cherry picked from commit 82b4950b5e92bec343a436b3f9c116400b66e1b9) Co-authored-by: Victor Stinner <vstinner@python.org> 09 December 2019, 14:19:48 UTC
0381ea7 bpo-38916: Document array.array deprecation (GH-17523) array.array: Document that tostring() and fromstring() deprecated aliases will be removed in Python 3.9. 09 December 2019, 13:46:33 UTC
d08fd29 bpo-38547: Fix test_pty if the process is the session leader (GH-17519) Fix test_pty: if the process is the session leader, closing the master file descriptor raises a SIGHUP signal: simply ignore SIGHUP when running the tests. (cherry picked from commit a1838ec2592e5082c75c77888f2a7a3eb21133e5) Co-authored-by: Victor Stinner <vstinner@python.org> 09 December 2019, 11:15:23 UTC
4594565 bpo-38669: patch.object now raises a helpful error (GH17510) This means a clearer message is now shown when patch.object is called with two string arguments, rather than a class and a string argument. (cherry picked from commit cd90a52983db34896a6335a572d55bdda274778f) Co-authored-by: Elena Oat <oat.elena@gmail.com> 09 December 2019, 06:59:04 UTC
184a381 bpo-38673: dont switch to ps2 if the line starts with comment or whitespace (GH-17421) https://bugs.python.org/issue38673 (cherry picked from commit 109fc2792a490ee5cd8a423e17d415fbdedec5c8) Co-authored-by: Batuhan Taşkaya <47358913+isidentical@users.noreply.github.com> 09 December 2019, 04:56:19 UTC
2abd3a8 bpo-38708: email: Fix a potential IndexError when parsing Message-ID (GH-17504) Fix a potential IndexError when passing an empty value to the message-id parser. Instead, HeaderParseError should be raised. (cherry picked from commit 3ae4ea1931361dd2743e464790e739d9285501bf) Co-authored-by: Abhilash Raj <maxking@users.noreply.github.com> 09 December 2019, 02:12:50 UTC
f66f4a0 bpo-38698: Add a new InvalidMessageID token to email header parser. (GH-17503) This adds a new InvalidMessageID token to the email header parser which can be used to represent invalid message-id headers in the parse tree. (cherry picked from commit 68157da8b42b26408af5d157d2dba4fcf29c6320) Co-authored-by: Abhilash Raj <maxking@users.noreply.github.com> 09 December 2019, 02:11:31 UTC
960fca1 bpo-38979: fix ContextVar "__class_getitem__" method (GH-17497) now contextvars.ContextVar "__class_getitem__" method returns ContextVar class, not None. https://bugs.python.org/issue38979 Automerge-Triggered-By: @asvetlov (cherry picked from commit 28c91631c24e53713ad0e8a2bbae716373f5e53d) Co-authored-by: AMIR <31338382+amiremohamadi@users.noreply.github.com> 08 December 2019, 12:49:07 UTC
9d3cacd [3.8] bpo-38820: OpenSSL 3.0.0 compatibility. (GH-17190) (GH-17499) test_openssl_version now accepts version 3.0.0. getpeercert() no longer returns IPv6 addresses with a trailing new line. Signed-off-by: Christian Heimes <christian@python.org> https://bugs.python.org/issue38820 (cherry picked from commit 2b7de6696bf2f924cd2cd9ff0a539c8aa37c6244) Co-authored-by: Christian Heimes <christian@python.org> https://bugs.python.org/issue38820 Automerge-Triggered-By: @tiran 07 December 2019, 17:20:27 UTC
930cef2 [3.8] bpo-37404: Raising value error if an SSLSocket is passed to asyncio functions (GH-16457) (#17496) https://bugs.python.org/issue37404 (cherry picked from commit 892f9e0777f262d366d4747a54c33a1c15a49da6) Co-authored-by: idomic <michael.ido@gmail.com> 07 December 2019, 12:44:20 UTC
ce0a2a8 Make repr of C accelerated TaskWakeupMethWrapper the same as of pure Python version (GH-17484) (cherry picked from commit 969ae7aca809a8dacafee04c261110eea0ac1945) Co-authored-by: Andrew Svetlov <andrew.svetlov@gmail.com> 07 December 2019, 11:41:41 UTC
7fde4f4 bpo-38529: Fix asyncio stream warning (GH-17474) (cherry picked from commit 7ddcd0caa4c2e6b43265df144f59c5aa508a94f2) Co-authored-by: Andrew Svetlov <andrew.svetlov@gmail.com> 07 December 2019, 11:39:57 UTC
836cf31 bpo-37931: Fix crash on OSX re-initializing os.environ (GH-15428) On most platforms, the `environ` symbol is accessible everywhere. In a dylib on OSX, it's not easily accessible, you need to find it with _NSGetEnviron. The code was caching the *value* of environ. But a setenv() can change the value, leaving garbage at the old value. Fix: don't cache the value of environ, just read it every time. (cherry picked from commit 723f71abf7ab0a7be394f9f7b2daa9ecdf6fb1eb) Co-authored-by: Benoit Hudson <benoit@imgspc.com> 06 December 2019, 19:32:33 UTC
c9f480d bpo-33125: Add support for building and releasing Windows ARM64 packages (GH-17480) Note that the support is not actually enabled yet, and so we won't be publishing these packages. However, for those who want to build it themselves (even by reusing the Azure Pipelines definition), it's now relatively easy to enable. 06 December 2019, 17:40:39 UTC
681285d bpo-36820: Break unnecessary cycle in socket.py, codeop.py and dyld.py (GH-13135) Break cycle generated when saving an exception in socket.py, codeop.py and dyld.py as they keep alive not only the exception but user objects through the ``__traceback__`` attribute. https://bugs.python.org/issue36820 Automerge-Triggered-By: @pablogsal (cherry picked from commit b64334cb93d0ddbb551c8cd712942bab2fc72772) Co-authored-by: Mario Corchero <mcorcherojim@bloomberg.net> 06 December 2019, 14:59:49 UTC
e21aa61 bpo-38698: Prevent UnboundLocalError to pop up in parse_message_id (GH-17277) parse_message_id() was improperly using a token defined inside an exception handler, which was raising `UnboundLocalError` on parsing an invalid value. https://bugs.python.org/issue38698 (cherry picked from commit bb815499af855b1759c02535f8d7a9d0358e74e8) Co-authored-by: Claudiu Popa <pcmanticore@gmail.com> 05 December 2019, 17:42:01 UTC
cfdaf92 [3.8] bpo-38270: Fix indentation of test_hmac assertions (GH-17446) (GH-17450) Since https://github.com/python/cpython/commit/c64a1a61e6fc542cada40eb069a239317e1af36e two assertions were indented and thus ignored when running test_hmac. This PR fixes it. As the change is quite trivial I didn't add a NEWS entry. https://bugs.python.org/issue38270 (cherry picked from commit 894331838b256412c95d54051ec46a1cb96f52e7) Co-authored-by: stratakis <cstratak@redhat.com> https://bugs.python.org/issue38270 Automerge-Triggered-By: @tiran 05 December 2019, 16:51:30 UTC
f4a21d3 bpo-38965: Fix faulthandler._stack_overflow() on GCC 10 (GH-17467) Use the "volatile" keyword to prevent tail call optimization on any compiler, rather than relying on compiler specific pragma. (cherry picked from commit 8b787964e0a647caa0558b7c29ae501470d727d9) Co-authored-by: Victor Stinner <vstinner@python.org> 04 December 2019, 20:30:31 UTC
68669ef bpo-38634: Allow non-apple build to cope with libedit (GH-16986) The readline module now detects if Python is linked to libedit at runtime on all platforms. Previously, the check was only done on macOS. If Python is used as a library by a binary linking to libedit, the linker resolves the rl_initialize symbol required by the readline module against libedit instead of libreadline, which leads to a segfault. Take advantage of the existing supporting code to have readline module being compatible with both situations. (cherry picked from commit 7105319ada2e663659020cbe9fdf7ff38f421ab2) Co-authored-by: serge-sans-paille <serge.guelton@telecom-bretagne.eu> 04 December 2019, 16:21:16 UTC
a75cad4 bpo-33684: json.tool: Use utf-8 for infile and outfile. (GH-17460) (cherry picked from commit 808769f3a4cbdc47cf1a5708dd61b1787bb192d4) Co-authored-by: Inada Naoki <songofacandy@gmail.com> 04 December 2019, 09:57:55 UTC
baf0739 bpo-27873: Update docstring for multiprocessing.Pool.map (GH-17436) Update docstring for `multiprocessing.Pool.map` to mention `pool.starmap()`. Prev PR: https://github.com/python/cpython/pull/17367 @aeros https://bugs.python.org/issue27873 (cherry picked from commit eb48a451e3844185b9a8751c9badffbddc89689d) Co-authored-by: An Long <aisk@users.noreply.github.com> 03 December 2019, 23:37:40 UTC
8859fc6 bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format (GH-17418) (cherry picked from commit a62ad4730c9b575f140f24074656c0257c86a09a) Co-authored-by: Matthew Rollings <1211162+stealthcopter@users.noreply.github.com> 02 December 2019, 22:44:44 UTC
9e72880 bpo-38815: Accept TLSv3 default in min max test (GH-NNNN) (GH-17437) Make ssl tests less strict and also accept TLSv3 as the default maximum version. This change unbreaks test_min_max_version on Fedora 32. https://bugs.python.org/issue38815 (cherry picked from commit 34864d1cffdbfc620f8517dab9a68ae9a37b8c53) Co-authored-by: torsava <torsava@redhat.com> 02 December 2019, 16:34:44 UTC
4f1eaf0 bpo-38449: Add URL delimiters test cases (GH-16729) * bpo-38449: Add tricky test cases * bpo-38449: Reflect codereview (cherry picked from commit 2fe4c48917c2d1b40cf063c6ed22ae2e71f4cb62) Co-authored-by: Dong-hee Na <donghee.na92@gmail.com> 01 December 2019, 23:24:17 UTC
d300c0e document threading.Lock.locked() (GH-17427) (cherry picked from commit fdafa1d0ed0a8930b52ee81e57c931cc4d5c2388) Co-authored-by: idomic <michael.ido@gmail.com> 01 December 2019, 20:14:26 UTC
5f23453 Fix typos (GH-17423) (cherry picked from commit 575d0b46d122292ca6e0576a91265d7abf7cbc3d) Co-authored-by: Ofek Lev <ofekmeister@gmail.com> 01 December 2019, 05:52:39 UTC
305189e [3.8] Added missing coma after end of list in subprocess.rst (GH-17389) (cherry picked from commit f25875af425a3480e557aaedf49c3bb867bcbd5d) 29 November 2019, 04:47:45 UTC
b74a6f1 bpo-38920: Add audit hooks for when sys.excepthook and sys.unraisablehook are invoked (GH-17392) Also fixes some potential segfaults in unraisable hook handling. 28 November 2019, 16:46:23 UTC
18d8edb bpo-38928: Remove upgrade_dependencies() from venv doc (GH-17410) 28 November 2019, 15:44:08 UTC
c0db88f bpo-38524: clarify example a bit and improve formatting (GH-17406) (cherry picked from commit 02519f75d15b063914a11351da30178ca4ceb54b) Co-authored-by: Tal Einat <taleinat+github@gmail.com> 28 November 2019, 05:29:02 UTC
d21b8e8 bpo-26730: Fix SpooledTemporaryFile data corruption (GH-17400) SpooledTemporaryFile.rollback() might cause data corruption when it is in text mode. Co-Authored-By: Serhiy Storchaka <storchaka@gmail.com> (cherry picked from commit ea9835c5d154ab6a54eed627958473b6768b28cc) Co-authored-by: Inada Naoki <songofacandy@gmail.com> 28 November 2019, 05:23:14 UTC
0f9c9d5 bpo-38524: document implicit and explicit calling of descriptors' __set_name__ (GH-17364) (cherry picked from commit 1bddf890e595a865414645c6041733043c4081f8) Co-authored-by: Florian Dahlitz <f2dahlitz@freenet.de> 27 November 2019, 08:53:52 UTC
65c92c5 [3.8] bpo-38688, shutil.copytree: consume iterator and create list of entries to prevent infinite recursion (GH-17397) (cherry picked from commit 9bbcbc9f6dfe1368fe7330b117707f828e6a2c18) Co-authored-by: Bruno P. Kinoshita <kinow@users.noreply.github.com> 27 November 2019, 04:49:37 UTC
a9c86f5 [3.8] bpo-38862: IDLE Strip Trailing Whitespace fixes end newlines (GH-17366) Extra newlines are removed at the end of non-shell files. If the file only has newlines after stripping other trailing whitespace, all are removed, as is done by patchcheck.py. (cherry picked from commit 6bf644ec82f14cceae68278dc35bafb00875efae) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> 27 November 2019, 01:13:23 UTC
191f94c bpo-38922: Raise code.__new__ audit event when code object replace() is called (GH-17394) (cherry picked from commit c7c01ab1e5415b772c68e15f1aba51e520010830) Co-authored-by: Steve Dower <steve.dower@python.org> 27 November 2019, 00:46:32 UTC
86d9933 bpo-38892: Improve docs for audit event (GH-17361) (cherry picked from commit e563a155be60fc0757914f87c8138f10de00bb16) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> 26 November 2019, 17:14:48 UTC
dadff6f Remove use of deprecated `array.fromstring` method (GH-17332) (cherry picked from commit 386d00cc341b549800776b906bfc6b20ea40c7db) Co-authored-by: David Coles <coles.david@gmail.com> 26 November 2019, 08:38:41 UTC
089387e bpo-21063: Improve module synopsis for distutils (GH-17363) (cherry picked from commit f8a6316778faff3991144c3aec4fa92d7b30a72b) Co-authored-by: Sanchit Khurana <54467174+GeniusLearner@users.noreply.github.com> 25 November 2019, 22:26:43 UTC
b9e5547 bpo-38686: fix HTTP Digest handling in request.py (GH-17045) * fix HTTP Digest handling in request.py There is a bug triggered when server replies to a request with `WWW-Authenticate: Digest` where `qop="auth,auth-int"` rather than mere `qop="auth"`. Having both `auth` and `auth-int` is legitimate according to the `qop-options` rule in §3.2.1 of [[https://www.ietf.org/rfc/rfc2617.txt|RFC 2617]]: > qop-options = "qop" "=" <"> 1GH-qop-value <"> > qop-value = "auth" | "auth-int" | token > **qop-options**: [...] If present, it is a quoted string **of one or more** tokens indicating the "quality of protection" values supported by the server. The value `"auth"` indicates authentication; the value `"auth-int"` indicates authentication with integrity protection This is description confirmed by the definition of the [//n//]`GH-`[//m//]//rule// extended-BNF pattern defined in §2.1 of [[https://www.ietf.org/rfc/rfc2616.txt|RFC 2616]] as 'a comma-separated list of //rule// with at least //n// and at most //m// items'. When this reply is parsed by `get_authorization`, request.py only tests for identity with `'auth'`, failing to recognize it as one of the supported modes the server announced, and claims that `"qop 'auth,auth-int' is not supported"`. * 📜🤖 Added by blurb_it. * bpo-38686 review fix: remember why. * fix trailing space in Lib/urllib/request.py Co-Authored-By: Brandt Bucher <brandtbucher@gmail.com> (cherry picked from commit 14a89c47983f2fb9e7fdf33c769e622eefd3a14a) Co-authored-by: PypeBros <PypeBros@users.noreply.github.com> 22 November 2019, 23:36:38 UTC
ca5fafc closes bpo-29275: Remove Y2K reference from time module docs (GH-17321) The Y2K reference is not needed as it only points out that Python's use of C standard functions doesn't generally suffer from Y2K issues; the point regarding conventions for conversion of 2-digit years in :func:`strptime` is still valid. (cherry picked from commit 42bc60ead39c7be9f6bb7329977826e962f601eb) Co-authored-by: Callum Ward <wards.callum@gmail.com> 22 November 2019, 17:03:50 UTC
a1e1be4 bpo-38804: Fix REDoS in http.cookiejar (GH-17157) The regex http.cookiejar.LOOSE_HTTP_DATE_RE was vulnerable to regular expression denial of service (REDoS). LOOSE_HTTP_DATE_RE.match is called when using http.cookiejar.CookieJar to parse Set-Cookie headers returned by a server. Processing a response from a malicious HTTP server can lead to extreme CPU usage and execution will be blocked for a long time. The regex contained multiple overlapping \s* capture groups. Ignoring the ?-optional capture groups the regex could be simplified to \d+-\w+-\d+(\s*\s*\s*)$ Therefore, a long sequence of spaces can trigger bad performance. Matching a malicious string such as LOOSE_HTTP_DATE_RE.match("1-c-1" + (" " * 2000) + "!") caused catastrophic backtracking. The fix removes ambiguity about which \s* should match a particular space. You can create a malicious server which responds with Set-Cookie headers to attack all python programs which access it e.g. from http.server import BaseHTTPRequestHandler, HTTPServer def make_set_cookie_value(n_spaces): spaces = " " * n_spaces expiry = f"1-c-1{spaces}!" return f"b;Expires={expiry}" class Handler(BaseHTTPRequestHandler): def do_GET(self): self.log_request(204) self.send_response_only(204) GH- Don't bother sending Server and Date n_spaces = ( int(self.path[1:]) GH- Can GET e.g. /100 to test shorter sequences if len(self.path) > 1 else 65506 GH- Max header line length 65536 ) value = make_set_cookie_value(n_spaces) for i in range(99): GH- Not necessary, but we can have up to 100 header lines self.send_header("Set-Cookie", value) self.end_headers() if __name__ == "__main__": HTTPServer(("", 44020), Handler).serve_forever() This server returns 99 Set-Cookie headers. Each has 65506 spaces. Extracting the cookies will pretty much never complete. Vulnerable client using the example at the bottom of https://docs.python.org/3/library/http.cookiejar.html : import http.cookiejar, urllib.request cj = http.cookiejar.CookieJar() opener = urllib.request.build_opener(urllib.request.HTTPCookieProcessor(cj)) r = opener.open("http://localhost:44020/") The popular requests library was also vulnerable without any additional options (as it uses http.cookiejar by default): import requests requests.get("http://localhost:44020/") * Regression test for http.cookiejar REDoS If we regress, this test will take a very long time. * Improve performance of http.cookiejar.ISO_DATE_RE A string like "444444" + (" " * 2000) + "A" could cause poor performance due to the 2 overlapping \s* groups, although this is not as serious as the REDoS in LOOSE_HTTP_DATE_RE was. (cherry picked from commit 1b779bfb8593739b11cbb988ef82a883ec9d077e) Co-authored-by: bcaller <bcaller@users.noreply.github.com> 22 November 2019, 14:42:06 UTC
c3cd0de bpo-22367: Update test_fcntl.py for spawn process mode (GH-17154) (GH-17252) (cherry picked from commit 9960230f76eb555d6dfbe8a324efed35610c85f9) Co-authored-by: Dong-hee Na <donghee.na92@gmail.com> 22 November 2019, 14:15:36 UTC
84c36c1 bpo-36854: Fix reference counter in PyInit__testcapi() (GH-17338) Increment properly Py_True/Py_False reference counter for _testcapi.WITH_PYMALLOC variable. 22 November 2019, 12:39:36 UTC
107ed88 bpo-38526: Fix zipfile.Path method name to be the correct one (GH-17317) (cherry picked from commit 65444cf7fe84d8ca1f9b51c7f5992210751e08bb) Co-authored-by: Claudiu Popa <pcmanticore@gmail.com> 21 November 2019, 21:41:20 UTC
b2744c1 [3.8] bpo-38857: AsyncMock fix for awaitable values and StopIteration fix [3.8] (GH-17269) (#17304) (cherry picked from commit 046442d02bcc6e848e71e93e47f6cde9e279e993) Co-authored-by: Jason Fried <fried@fb.com> 21 November 2019, 18:14:32 UTC
9458c5c bpo-37838: get_type_hints for wrapped functions with forward reference (GH-17126) https://bugs.python.org/issue37838 (cherry picked from commit 0aca3a3a1e68b4ca2d334ab5255dfc267719096e) Co-authored-by: benedwards14 <53377856+benedwards14@users.noreply.github.com> 21 November 2019, 17:43:42 UTC
767b426 bpo-38875: test_capi: trashcan tests require cpu resource (GH-17314) test_capi: trashcan tests now require the test "cpu" resource. (cherry picked from commit 0127bb1c5c3286f87e284ff6083133bfdcfd5a4f) Co-authored-by: Victor Stinner <vstinner@python.org> 21 November 2019, 12:11:44 UTC
23f9be2 Update functions.rst (GH-16468) This PR will make the following changes to the [_Built-in Functions_](https://docs.python.org/3/library/functions.html) chapter of the library documentation: - improve hyperlinks in Sphinx roles (trailing 's' belong to hyperlinks). Automerge-Triggered-By: @csabella (cherry picked from commit d67279147ace3b63187e5d75a15c345264f39e85) Co-authored-by: Géry Ogam <gery.ogam@gmail.com> 21 November 2019, 02:17:51 UTC
d5d41d3 bpo-36277: Add document for pdb debug and retval commands (GH-12872) https://bugs.python.org/issue36277 Automerge-Triggered-By: @csabella (cherry picked from commit 9391f6c3ef24f7962c534c42ccb792debdbef509) Co-authored-by: Dave Nguyen <dv@dvnguyen.com> 21 November 2019, 01:56:26 UTC
ac99ea4 Removed capital letter in parameter in stdtypes.rst (GH-17218) Automerge-Triggered-By: @csabella (cherry picked from commit 6db2fb7c300ca79d5585f2ae524ff4ca2707a7b6) Co-authored-by: Jules Lasne (jlasne) <jules.lasne@gmail.com> 21 November 2019, 01:36:46 UTC
c5fe339 Fixed an incorrect sentence in the docs (GH-17205) Fixed an incorrect sentence in Doc/c-api/mapping.rst I fell on while translating the file. skip issue Automerge-Triggered-By: @csabella (cherry picked from commit 06ca2a2be9374ac390e9407685ccce941ab9ffa2) Co-authored-by: Aveheuzed <a.masson555@ntymail.com> 21 November 2019, 01:26:30 UTC
b762375 bpo-38841: Skip asyncio test_create_datagram_endpoint_existing_sock_unix (GH-17294) on platforms lacking a functional bind() for named unix domain sockets https://bugs.python.org/issue38841 Automerge-Triggered-By: @asvetlov (cherry picked from commit 559bad1a70ed50cc9caa7cb303b6ac1fe6a34af3) Co-authored-by: xdegaye <xdegaye@gmail.com> 20 November 2019, 20:20:25 UTC
836f137 bpo-38821: Fix crash in argparse when using gettext (GH-17192) (cherry picked from commit be5c79e0338005d675a64ba6e5b137e850d556d1) Co-authored-by: Federico Bond <federicobond@gmail.com> 20 November 2019, 13:48:25 UTC
daf7a08 bpo-38823: Fix refleak in _tracemalloc init error handling (GH-17235) (cherry picked from commit d51a363a4379385fdfe9c09a56324631465ede29) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 20 November 2019, 10:26:48 UTC
2ea4c37 bpo-38823: Fix refleak in marshal init error path (GH-17260) (cherry picked from commit 33b671e72450bf4b5a946ce0dde6b7fe21150108) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 20 November 2019, 10:16:02 UTC
1322439 bpo-38636: Fix IDLE tab toggle and file indent width (GH-17008) These Format menu functions (default shortcuts Alt-T and Alt-U) were mistakenly disabled in 3.7.5 and 3.8.0. (cherry picked from commit b8462477bfd01ff21461065d5063e6b0238ca809) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> 20 November 2019, 06:37:47 UTC
a5ed2fe bpo-38823: Fix refleaks in faulthandler init error path on Windows (GH-17250) (cherry picked from commit ac2235432c607ce2c0faf6dff5d9b2534d2f6652) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 19 November 2019, 23:31:08 UTC
829593a bpo-38707: Fix for multiprocessing.Process MainThread.native_id (GH-17088) This PR implements a fix for `multiprocessing.Process` objects; the error occurs when Processes are created using either `fork` or `forkserver` as the `start_method`. In these instances, the `MainThread` of the newly created `Process` object retains all attributes from its parent's `MainThread` object, including the `native_id` attribute. The resulting behavior is such that the new process' `MainThread` captures an incorrect/outdated `native_id` (the parent's instead of its own). This change forces the Process object to update its `native_id` attribute during the bootstrap process. cc @vstinner https://bugs.python.org/issue38707 Automerge-Triggered-By: @pitrou (cherry picked from commit c6b20be85c0de6f2355c67ae6e7e578941275cc0) Co-authored-by: Jake Tesler <jake.tesler@gmail.com> 19 November 2019, 20:11:20 UTC
6c3b471 bpo-35409: Ignore GeneratorExit in async_gen_athrow_throw (GH-14755) Ignore `GeneratorExit` exceptions when throwing an exception into the `aclose` coroutine of an asynchronous generator. https://bugs.python.org/issue35409 (cherry picked from commit 8e0de2a4808d7c2f4adedabff89ee64e0338790a) Co-authored-by: Vincent Michel <vxgmichel@gmail.com> 19 November 2019, 14:12:06 UTC
c749326 Add missing comma and period in unittest docs (GH-17211) Automerge-Triggered-By: @csabella (cherry picked from commit b1f160a236cb590b1c1a678ca5fc19d5c75dcd83) Co-authored-by: Jules Lasne (jlasne) <jules.lasne@gmail.com> 19 November 2019, 12:12:58 UTC
b5bb3b6 bpo-38807: Add os.PathLike to exception message raised by _check_arg_types (GH-17160) (GH-17249) (cherry picked from commit fe75b62575bcfdf1c39be71c1e50257832a596db) Co-authored-by: Tomás Farías <tomasfariassantana@gmail.com> 19 November 2019, 06:46:10 UTC
bec7015 bpo-38622: Ensure ctypes.PyObj_FromPtr audit event passes tuples as a single argument (GH-17243) (cherry picked from commit dcf1f83de8678b09df5bd7d04ca5f4ef1cd02aca) Co-authored-by: Steve Dower <steve.dower@python.org> 18 November 2019, 21:59:51 UTC
e37767b bpo-38722: Runpy use io.open_code() (GH-17234) https://bugs.python.org/issue38722 Automerge-Triggered-By: @taleinat (cherry picked from commit e243bae9999418859106328d9fce71815b7eb2fe) Co-authored-by: jsnklln <jsnklln@gmail.com> 18 November 2019, 21:58:02 UTC
47db743 bpo-38622: Add missing audit events for ctypes module (GH-17158) (cherry picked from commit 00923c63995e34cdc25d699478f113de99a69df9) Co-authored-by: Steve Dower <steve.dower@python.org> 18 November 2019, 19:53:34 UTC
cbbf109 bpo-38809: Windows build scripts use python.exe from virtual envs (GH-17164) https://bugs.python.org/issue38809 (cherry picked from commit ee703cbb418b7458bebb1d26a5e19d6b55280b28) Co-authored-by: Tal Einat <taleinat+github@gmail.com> 18 November 2019, 17:53:21 UTC
ca877c7 Correct the description of the 3.7 change in urllib.parse.quote (GH-17065) `~` is now treated as an unreserved character (i.e. it doesn't get quoted), not a reserved one. (cherry picked from commit f49f6baa6bf7916ac039194c24b59d2eff5b180a) Co-authored-by: Роман Донченко <dpb@corrigendum.ru> 18 November 2019, 15:42:13 UTC
42a4359 bpo-38823: Clean up refleaks in _tkinter initialization. (GH-17206) https://bugs.python.org/issue38823 (cherry picked from commit 289cf0fbf78c4f38c38ac71ac8b772be7ec2672f) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 18 November 2019, 15:10:31 UTC
bef2815 bpo-16576: Add checks for bitfields passed by value to functions. (GH-17097) (GH-17223) (cherry picked from commit 106271568c58cfebae58f0c52b640dbe716ba2ce) 18 November 2019, 14:29:15 UTC
21eb731 [3.8] bpo-38830: Correct slot signature in Qt example. (GH-17220) (GH-17221) (cherry picked from commit 5383956583bb758f3828513bcdd011871f24a0e8) 18 November 2019, 12:23:46 UTC
39134b3 bpo-38678: Improve argparse example in tutorial (GH-17207) (GH-17212) (cherry picked from commit 04c79d6088a22d467f04dbe438050c26de22fa85) Co-authored-by: Raymond Hettinger <rhettinger@users.noreply.github.com> 18 November 2019, 06:17:14 UTC
20a4f6c bpo-25866: Minor cleanups to "sequence" in docs (GH-17177) (GH-17208) (cherry picked from commit 4544e78ec4558b75bf95e5b7dfc1b5bbb07ae5f0) Co-authored-by: alclarks <57201106+alclarks@users.noreply.github.com> 17 November 2019, 22:13:33 UTC
back to top