Re: [Python-Dev] Security implications of pep 383

2011-03-30 Thread Lennart Regebro
On Wed, Mar 30, 2011 at 07:54, Toshio Kuratomi a.bad...@gmail.com wrote: Lennart is missing that you just need to use the same encoding + surrogateescape (or stick with bytes) for decoding the byte strings that you are comparing. You lost me here. I need to do this for what? //Lennart

Re: [Python-Dev] Security implications of pep 383

2011-03-30 Thread Lennart Regebro
On Tue, Mar 29, 2011 at 23:17, Martin v. Löwis mar...@v.loewis.de wrote: I think the whole blacklist example is artificial. The string in the blacklist is actually a Chinese hello greeting, so it surely isn't the string being blacklisted. For proper blacklisting, you would likely use substring

Re: [Python-Dev] Security implications of pep 383

2011-03-30 Thread Gregory P. Smith
On Tue, Mar 29, 2011 at 4:07 PM, Terry Reedy tjre...@udel.edu wrote: On 3/29/2011 2:23 PM, Michael Foord wrote: Not sure how real the security risk is here: http://blog.omega-prime.co.uk/?p=107 Basically he is saying that if you store a list of blacklisted files with names encoded in

Re: [Python-Dev] Differences among Emacsen

2011-03-30 Thread Ralf Schmitt
Barry Warsaw ba...@python.org writes: In case you missed it, there are now *three* Python modes. Tim Peters' original and best (in my completely unbiased opinion wink) python-mode.el which is still being developed, the older but apparently removed from Emacs python.el and the 'new' (so I've

Re: [Python-Dev] Failed issue tracker submission

2011-03-30 Thread Amaury Forgeot d'Arc
2011/3/29 Python tracker roundup-ad...@psf.upfronthosting.co.za: The node specified by the designator in the subject of your message (22663) does not exist. Subject was: [issue22663] Aha. This email was probably generated by a commit hook because this changeset

Re: [Python-Dev] Information about how cpython in benchmarked

2011-03-30 Thread Jesse Noller
On Wed, Mar 30, 2011 at 1:19 AM, Nick Stinemates nstinema...@gmail.com wrote: This is really great to hear and something I would be hugely interested in contributing to. Lurking has paid off :) Nick Once I get the machine in place, and the team engaged, I am sure they'll be looking for help.

Re: [Python-Dev] Security implications of pep 383

2011-03-30 Thread Nick Coghlan
On Wed, Mar 30, 2011 at 4:57 PM, Gregory P. Smith g...@krypto.org wrote: I don't see your comment on the blog post.  So either the author is moderating comments and hasn't seen yours yet (likely) or they don't want disagreement in their comments. ;) My comment was sitting in the moderation

Re: [Python-Dev] .hgignore including site-packages and scripts directories?

2011-03-30 Thread Antoine Pitrou
On Wed, 30 Mar 2011 12:17:05 +1100 Mark Hammond mhamm...@skippinet.com.au wrote: On 30/03/2011 12:09 PM, R. David Murray wrote: On Wed, 30 Mar 2011 11:11:45 +1100, Mark Hammondmhamm...@skippinet.com.au wrote: I'm wondering if it is a reasonable idea to have .hgignore exclude all files

Re: [Python-Dev] Security implications of pep 383

2011-03-30 Thread Glenn Linderman
On 3/29/2011 12:10 PM, Toshio Kuratomi wrote: The possible flaw in python is this: Code like the blog poster wrote passes python3 without an error or a warning. This gives the programmer no feedback that they're doing something wrong until it actually bites them in the foot in deployed code.

[Python-Dev] Test Force Build on custom buildbots

2011-03-30 Thread Victor Stinner
Hi, I'm testing my faulthandler repository on the custom buildbots, here are some remarks and issues. The form still refers to SVN ('Branch to build' is relative to http://svn.python.org/projects/python.) = the branch is relative to hg.python.org/ I cannot write # in the branch field to

Re: [Python-Dev] Test Force Build on custom buildbots

2011-03-30 Thread Antoine Pitrou
On Wed, 30 Mar 2011 17:59:02 +0200 Victor Stinner victor.stin...@haypocalc.com wrote: I cannot write # in the branch field to specify... the branch (only the repository). If the branch contains #, the request looks to be ignored (without any warning/error). I merged my faulthandler branch

Re: [Python-Dev] Test Force Build on custom buildbots

2011-03-30 Thread Victor Stinner
Le mercredi 30 mars 2011 à 17:59 +0200, Victor Stinner a écrit : I'm testing my faulthandler repository on the custom buildbots, here are some remarks and issues. Oh, I forgot something: there is an error on hg purge. Example on a Windows buildbot: C:\Program Files\Mercurial\hg.EXE purge

Re: [Python-Dev] Test Force Build on custom buildbots

2011-03-30 Thread Antoine Pitrou
On Wed, 30 Mar 2011 18:11:53 +0200 Victor Stinner victor.stin...@haypocalc.com wrote: Le mercredi 30 mars 2011 à 17:59 +0200, Victor Stinner a écrit : I'm testing my faulthandler repository on the custom buildbots, here are some remarks and issues. Oh, I forgot something: there is an error

Re: [Python-Dev] Security implications of pep 383

2011-03-30 Thread Terry Reedy
On 3/30/2011 2:57 AM, Gregory P. Smith wrote: http://blog.omega-prime.co.uk/?p=107 I posted link to this as comment, with my summary of thread. I don't see your comment on the blog post. So either the author is moderating comments and hasn't seen yours yet (likely) My comment and

Re: [Python-Dev] Differences among Emacsen

2011-03-30 Thread Barry Warsaw
On Mar 30, 2011, at 09:43 AM, Ralf Schmitt wrote: Barry Warsaw ba...@python.org writes: In case you missed it, there are now *three* Python modes. Tim Peters' original and best (in my completely unbiased opinion wink) python-mode.el which is still being developed, the older but apparently

Re: [Python-Dev] Differences among Emacsen

2011-03-30 Thread Glyph Lefkowitz
On Mar 30, 2011, at 2:54 PM, Barry Warsaw wrote: On Mar 30, 2011, at 09:43 AM, Ralf Schmitt wrote: Barry Warsaw ba...@python.org writes: In case you missed it, there are now *three* Python modes. Tim Peters' original and best (in my completely unbiased opinion wink) python-mode.el

Re: [Python-Dev] Replace useless %.100s by %s in PyErr_Format()

2011-03-30 Thread M.-A. Lemburg
Victor Stinner wrote: Le jeudi 24 mars 2011 à 13:22 +0100, M.-A. Lemburg a écrit : BTW: Why do you think that %.100s is not supported in PyErr_Format() in Python 2.x ? PyString_FromFormatV() does support this. The change to use Unicode error strings introduced the problem, since

Re: [Python-Dev] devguide: Add a table of contents to the FAQ.

2011-03-30 Thread Antoine Pitrou
On Tue, 29 Mar 2011 21:00:22 +0200 ezio.melotti python-check...@python.org wrote: http://hg.python.org/devguide/rev/f722956afeac changeset: 405:f722956afeac user:Ezio Melotti date:Tue Mar 29 22:00:13 2011 +0300 summary: Add a table of contents to the FAQ. Could it be

[Python-Dev] Documenting the buildbots

2011-03-30 Thread Antoine Pitrou
For the record, I added a page documenting our continuous integration setup at: http://docs.python.org/devguide/buildbots.html Regards Antoine. On Wed, 30 Mar 2011 17:59:02 +0200 Victor Stinner victor.stin...@haypocalc.com wrote: Hi, I'm testing my faulthandler repository on the custom

Re: [Python-Dev] Documenting the buildbots

2011-03-30 Thread Jesse Noller
On Wed, Mar 30, 2011 at 5:01 PM, Antoine Pitrou solip...@pitrou.net wrote: For the record, I added a page documenting our continuous integration setup at: http://docs.python.org/devguide/buildbots.html Regards Antoine. that's awesome. should we document how to donate/add a buildbot

Re: [Python-Dev] Documenting the buildbots

2011-03-30 Thread Antoine Pitrou
On Wed, 30 Mar 2011 17:14:10 -0400 Jesse Noller jnol...@gmail.com wrote: On Wed, Mar 30, 2011 at 5:01 PM, Antoine Pitrou solip...@pitrou.net wrote: For the record, I added a page documenting our continuous integration setup at: http://docs.python.org/devguide/buildbots.html Regards

Re: [Python-Dev] Documenting the buildbots

2011-03-30 Thread Jesse Noller
On Wed, Mar 30, 2011 at 5:24 PM, Antoine Pitrou solip...@pitrou.net wrote: On Wed, 30 Mar 2011 17:14:10 -0400 Jesse Noller jnol...@gmail.com wrote: On Wed, Mar 30, 2011 at 5:01 PM, Antoine Pitrou solip...@pitrou.net wrote: For the record, I added a page documenting our continuous

[Python-Dev] Please revert autofolding of tracker edit form

2011-03-30 Thread Terry Reedy
The tracker was recently changed so that when I click on a link to a tracker page, the page is properly displayed, but then a fraction of a second it blinks and redisplays with the edit form hidden. This is so obnoxious to me that I no longer want to visit the tracker. Then I have to find and

[Python-Dev] Notification for buildbot builder changes for slaves?

2011-03-30 Thread David Bolen
I was wondering if it might be possible to have a channel (message here, email to a list of slave owners or whatever) to mention when the set of builders for the slaves is getting adjusted? A new builder tree can burn a good deal of disk space in some cases for example (each tree adds in the

Re: [Python-Dev] Security implications of pep 383

2011-03-30 Thread Toshio Kuratomi
On Wed, Mar 30, 2011 at 08:36:43AM +0200, Lennart Regebro wrote: On Wed, Mar 30, 2011 at 07:54, Toshio Kuratomi a.bad...@gmail.com wrote: Lennart is missing that you just need to use the same encoding + surrogateescape (or stick with bytes) for decoding the byte strings that you are

Re: [Python-Dev] Please revert autofolding of tracker edit form

2011-03-30 Thread Nick Coghlan
On Thu, Mar 31, 2011 at 7:35 AM, Terry Reedy tjre...@udel.edu wrote: The tracker was recently changed so that when I click on a link to a tracker page, the page is properly displayed, but then a fraction of a second it blinks and redisplays with the edit form hidden. This is so obnoxious to me

Re: [Python-Dev] Please revert autofolding of tracker edit form

2011-03-30 Thread Raymond Hettinger
On Mar 30, 2011, at 2:35 PM, Terry Reedy wrote: The tracker was recently changed so that when I click on a link to a tracker page, the page is properly displayed, but then a fraction of a second it blinks and redisplays with the edit form hidden. This is so obnoxious to me that I no

Re: [Python-Dev] Please revert autofolding of tracker edit form

2011-03-30 Thread Simon Cross
On Thu, Mar 31, 2011 at 12:54 AM, Nick Coghlan ncogh...@gmail.com wrote: Interesting - it comes straight up with the folded screen for me, no flickering at all. I didn't get any flicker either and my first impression of the change was also positive -- I usually skip straight to the comments the

Re: [Python-Dev] Please revert autofolding of tracker edit form

2011-03-30 Thread Antoine Pitrou
On Thu, 31 Mar 2011 08:54:41 +1000 Nick Coghlan ncogh...@gmail.com wrote: On Thu, Mar 31, 2011 at 7:35 AM, Terry Reedy tjre...@udel.edu wrote: The tracker was recently changed so that when I click on a link to a tracker page, the page is properly displayed, but then a fraction of a second it

Re: [Python-Dev] Documenting the buildbots

2011-03-30 Thread skip
For the record, I added a page documenting our continuous integration setup at: http://docs.python.org/devguide/buildbots.html Jesse that's awesome. should we document how to donate/add a buildbot Jesse somewhere in the same section (or alongside)? I must admit, it wasn't

[Python-Dev] faulthandler is now part of Python 3.3

2011-03-30 Thread Victor Stinner
Hi, I pushed my faulthandler module into the default branch (Python 3.3). Since one week, I fixed a lot of bugs (platform issues), improved the tests and Antoine wrote a new implementation of dump_backtraces_later() using a thread (instead of SIGALRM+alarm()). It should now work on all platforms

Re: [Python-Dev] Please revert autofolding of tracker edit form

2011-03-30 Thread Terry Reedy
On 3/30/2011 7:32 PM, Antoine Pitrou wrote: There's a lot of noise but that noise is useful. I find the natural language summary to be much too terse and doesn't make it easy to visualize said information as opposed to the form fields. Yes, there is a good reason why database records are

Re: [Python-Dev] Security implications of pep 383

2011-03-30 Thread Terry Reedy
On 3/30/2011 6:39 PM, Toshio Kuratomi wrote: Really, surrogates are a red herring to this whole issue. The issue is that the original code was trying to compare two different transformations of byte sequences and expecting them to be equal. Let's say that you have the following byte value::

Re: [Python-Dev] Please revert autofolding of tracker edit form

2011-03-30 Thread R. David Murray
On Thu, 31 Mar 2011 08:54:41 +1000, Nick Coghlan ncogh...@gmail.com wrote: On Thu, Mar 31, 2011 at 7:35 AM, Terry Reedy tjre...@udel.edu wrote: If someone actually considers this a desired feature, after using it, then please add a field on the profile page to select autofolding or not. Also,

[Python-Dev] Non-code changes on old branches

2011-03-30 Thread Mark Hammond
Hi, There are a couple of changes I'd like to make and would like some guidance on policy: http://bugs.python.org/issue6498 is a documentation bug which exists in Python 2.6 and later. The patch in that bug touches the docs and a comment in one source file. Is it acceptable to push that