[issue13885] CVE-2011-3389: _ssl module always disables the CBC IV attack countermeasure

2012-01-27 Thread Antoine Pitrou

New submission from Antoine Pitrou pit...@free.fr:

Original e-mail from Apple security team:

 Follow-up:  187806281
 
 SSL 3.0 and TLS 1.0 are vulnerable to an attack described at
 
 http://www.openssl.org/~bodo/tls-cbc.txt
 
 OpenSSL includes a countermeasure which prevents the attack, but python
 2.7 has, around line 372 of Modules/_ssl.c:
 
 SSL_CTX_set_options(self-ctx, SSL_OP_ALL);
 
 SSL_OP_ALL includes SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS which disables the 
 countermeasure.
 
 2.6 is similar.

--
components: Extension Modules
messages: 152068
nosy: barry, benjamin.peterson, loewis, pitrou
priority: critical
severity: normal
stage: commit review
status: open
title: CVE-2011-3389: _ssl module always disables the CBC IV attack 
countermeasure
type: security
versions: Python 2.6, Python 2.7, Python 3.1, Python 3.2, Python 3.3

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13885
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13885] CVE-2011-3389: _ssl module always disables the CBC IV attack countermeasure

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

Attaching patches.

--
Added file: http://bugs.python.org/file24336/CVE-2011-3389-3.2.patch

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13885
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13885] CVE-2011-3389: _ssl module always disables the CBC IV attack countermeasure

2012-01-27 Thread Antoine Pitrou

Changes by Antoine Pitrou pit...@free.fr:


--
keywords: +patch
Added file: http://bugs.python.org/file24335/CVE-2011-3389-2.7.patch

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13885
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13703] Hash collision security issue

2012-01-27 Thread Martin v . Löwis

Martin v. Löwis mar...@v.loewis.de added the comment:

 Could the AVL tree approach be extended to apply to dictionaries
 containing keys of any single type that supports comparison?  That
 approach would autodetect UserString or similar and support it
 properly.

I think we would need a place to store the single key type, which,
from an ABI point of view, might be difficult to find (but we could
overload ma_smalltable for that, or reserve ma_table[0]).

In addition, I think it is difficult to determine whether a type
supports comparison, at least in 2.x. For example,

class X:
  def __eq__(self, o):
return self.a == o.a

allows to create objects x and y so that xyz, yet x==z.

For 3.x, we could assume that a failure to support comparison
raises an exception, in which case we could just wait for the
exception to happen, and then flatten the dictionary and start
over with the lookup. This would extend even to mixed key
types.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13703
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13885] CVE-2011-3389: _ssl module always disables the CBC IV attack countermeasure

2012-01-27 Thread Roundup Robot

Roundup Robot devn...@psf.upfronthosting.co.za added the comment:

New changeset 9a4131ada792 by Antoine Pitrou in branch '2.6':
Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV 
attack countermeasure.
http://hg.python.org/cpython/rev/9a4131ada792

New changeset 8dec547c23d3 by Antoine Pitrou in branch '2.7':
Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV 
attack countermeasure.
http://hg.python.org/cpython/rev/8dec547c23d3

--
nosy: +python-dev

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13885
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13885] CVE-2011-3389: _ssl module always disables the CBC IV attack countermeasure

2012-01-27 Thread Roundup Robot

Roundup Robot devn...@psf.upfronthosting.co.za added the comment:

New changeset e7706bdaaa0d by Antoine Pitrou in branch '3.1':
Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV 
attack countermeasure.
http://hg.python.org/cpython/rev/e7706bdaaa0d

New changeset 4386686a035d by Antoine Pitrou in branch '3.2':
Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV 
attack countermeasure.
http://hg.python.org/cpython/rev/4386686a035d

New changeset d1390175fdc6 by Antoine Pitrou in branch 'default':
Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV 
attack countermeasure.
http://hg.python.org/cpython/rev/d1390175fdc6

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13885
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13885] CVE-2011-3389: _ssl module always disables the CBC IV attack countermeasure

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

This hopefully fixes the issue.

--
resolution:  - fixed
stage: commit review - committed/rejected
status: open - closed

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13885
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13873] SIGBUS in test_zlib on Debian bigmem buildbot

2012-01-27 Thread Nadeem Vawda

Nadeem Vawda nadeem.va...@gmail.com added the comment:

I've also been unable to reproduce it on my own machine (AMD64; 8GB RAM).

I guess I'll have to do some trial-and-error debugging using the custom
builder to figure this out.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13873
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13848] io.open() doesn't check for embedded NUL characters

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

Indeed, there seems to be no mechanism available to forbid NUL chars under 
Windows (for Python 3.x):

 open(LICENSE\x00foobar)
_io.TextIOWrapper name='LICENSE\x00foobar' mode='r' encoding='cp1252'
 os.stat(LICENSE\x00foobar)
nt.stat_result(st_mode=33206, st_ino=2251799813779714, st_dev=0, st_nlink=1, 
st_uid=0, st_gid=0, st_size=15132, st_atime=8589934592, st_mtime=8589934592, 
st_ctime=1301169903)

I think PyUnicode_AsUnicode should grow a NUL char check in Python 3.3, since 
it doesn't return the size anyway. I don't think we can do that in previous 
versions, though, so we need an alternate strategy. Scanning the unicode string 
for NUL characters is enough. That should be easy by using 
PyUnicode_AsUnicodeAndSize.

As for the patch:
- the test should be in test_io; you may also add a separate in test_fileio
- conv_name is never decref'ed, and so there will be a memory leak

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13848
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue1003195] segfault when running smtplib example

2012-01-27 Thread Charles-François Natali

Changes by Charles-François Natali neolo...@free.fr:


--
resolution: wont fix - 
status: closed - open

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue1003195
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13877] segfault when running smtplib example

2012-01-27 Thread Charles-François Natali

Charles-François Natali neolo...@free.fr added the comment:

 See (permanently closed?) similar bug at:

I reopened it.

--
nosy: +neologix
resolution:  - duplicate
stage:  - committed/rejected
status: open - closed
superseder:  - segfault when running smtplib example

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13877
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13848] io.open() doesn't check for embedded NUL characters

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

Since the NUL-scanning will be useful for Modules/posixmodule.c as well, 
perhaps it should be done as a private _PyUnicode_HasNULChars() function.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13848
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13812] multiprocessing package doesn't flush stderr on child exception

2012-01-27 Thread Roundup Robot

Roundup Robot devn...@psf.upfronthosting.co.za added the comment:

New changeset 2863d9273abd by Antoine Pitrou in branch '3.2':
Issue #13812: When a multiprocessing Process child raises an exception, flush 
stderr after printing the exception traceback.
http://hg.python.org/cpython/rev/2863d9273abd

New changeset 96c1de5acbd3 by Antoine Pitrou in branch 'default':
Issue #13812: When a multiprocessing Process child raises an exception, flush 
stderr after printing the exception traceback.
http://hg.python.org/cpython/rev/96c1de5acbd3

--
nosy: +python-dev

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13812
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13812] multiprocessing package doesn't flush stderr on child exception

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

Patch now committed, thanks.

--
resolution:  - fixed
stage: patch review - committed/rejected
status: open - closed

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13812
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13886] readline-related test_builtin failure

2012-01-27 Thread Nadeem Vawda

New submission from Nadeem Vawda nadeem.va...@gmail.com:

I've recently come across a strange failure in the tests for the input()
built-in function:

$ ./python -E -m test -v test_readline test_builtin

[... snip ...]

==
FAIL: test_input_tty_non_ascii (test.test_builtin.BuiltinTest)
--
Traceback (most recent call last):
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1079, 
in test_input_tty_non_ascii
self.check_input_tty(prompté, bquux\xe9, utf-8)
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1070, 
in check_input_tty
self.assertEqual(input_result, expected)
AssertionError: 'quux' != 'quux\udce9'
- quux
+ quux\udce9
? +


==
FAIL: test_input_tty_non_ascii_unicode_errors 
(test.test_builtin.BuiltinTest)
--
Traceback (most recent call last):
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1083, 
in test_input_tty_non_ascii_unicode_errors
self.check_input_tty(prompté, bquux\xe9, ascii)
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1070, 
in check_input_tty
self.assertEqual(input_result, expected)
AssertionError: 'quux' != 'quux\udce9'
- quux
+ quux\udce9
? +

The failure only manifests itself if the readline module is loaded before
test_builtin runs (hence the presence of test_readline above). It will
not occur if regrtest is run with either of the -j or -W flags (which is
why it hasn't been seen on the buildbots).

The problem seems to be that readline assumes that its input should use
the locale encoding, and silently strips out any undecodable chars. This
breaks the tests mentioned above, since they set up sys.stdin to use the
surrogateescape error handler, expecting invalid characters to be escaped
rather than discarded.

This problem doesn't crop up if readline is *not* loaded, because in that
case PyOS_Readline() falls back to a stdio-based implementation
(PyOS_StdioReadline()) that preserves invalid characters, allowing them
to be handled properly by sys.stdin's encoding and error handler.

I have been able to fix the test failures with the attached patch, which
stops readline from eating invalid characters, making it consistent with
the stdio-based fallback. Can someone with more knowledge of readline
and/or locale issues advise whether the change is a good idea?

--
components: Extension Modules
files: rl-locale.diff
keywords: patch
messages: 152080
nosy: nadeem.vawda
priority: normal
severity: normal
stage: patch review
status: open
title: readline-related test_builtin failure
type: behavior
versions: Python 3.2, Python 3.3
Added file: http://bugs.python.org/file24337/rl-locale.diff

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13886
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13880] pydoc -k throws AssertionError: distutils has already been patched by class py2exe.Distribution at 0x0000000005987408

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

For the record, the proposed solution in that e-mail is the following:

B) Patch the run() method of pydoc module at line 1862:

for importer, modname, ispkg in 
pkgutil.walk_packages(onerror=lambda s:None):

--
components: +Library (Lib)
nosy: +pitrou
type: crash - behavior
versions: +Python 3.2, Python 3.3

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13880
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13886] readline-related test_builtin failure

2012-01-27 Thread Nadeem Vawda

Nadeem Vawda nadeem.va...@gmail.com added the comment:

Here's another patch that ensures the test always exercises the GNU
readline code path (rather than the stdio fallback). This will cause the
failure to occur when running just test_builtin (no need to also run
test_readline before it).

Ideally we'd want to test both code paths, but I'm not sure how to
accomplish that reliably, short of running the test in a subprocess.

--
Added file: http://bugs.python.org/file24338/rl-test.diff

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13886
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13887] defaultdict.get does not default to initial default but None

2012-01-27 Thread Jörn Hees

New submission from Jörn Hees nrej9...@joernhees.de:

I wanted to create a function registrar d using a defaultdict. The library 
that this registrar is passed to expects it to return functions taking 3 args. 
Now if the first call is d.get(x) it seems that in contrast to d[x] the default 
arg of get is returned (None) instead of the defaultdicts default. If i call 
d[x] first and then d.get(x) i get what i expected.

Example:

In [1]: def foo(a,b,c):
   ...: return (a,b,c)
   ...: 

In [2]: from collections import defaultdict

In [3]: d = defaultdict(lambda:foo)

In [4]: d.get(1)

In [5]: d[1]
Out[5]: function foo at 0x1015a2ed8

In [6]: d.get(1)
Out[6]: function foo at 0x1015a2ed8

In [7]: d.get(2)(1,2,3)
---
TypeError Traceback (most recent call last)

/Users/joern/ipython console in module()

TypeError: 'NoneType' object is not callable

In [8]: d[2](1,2,3)
Out[8]: (1, 2, 3)

In [9]: d.get(2)(1,2,3)
Out[9]: (1, 2, 3)


I'm not sure this is the desired behavior, but it wasn't quite what i expected 
from a dictionary with a default.
If it is the desired behavior the documentation of defaultdict should include 
an explanation what happens.

--
components: Extension Modules, Library (Lib)
messages: 152083
nosy: joern
priority: normal
severity: normal
status: open
title: defaultdict.get does not default to initial default but None
type: behavior
versions: Python 2.7

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13887
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13888] test_builtin failure when run after test_tk

2012-01-27 Thread Nadeem Vawda

New submission from Nadeem Vawda nadeem.va...@gmail.com:

While investigating issue 13886, I found that test_builtin will fail when run
after test_tk:

$ ./python -Wd -E -bb -m test -vuall test_tk test_builtin
== CPython 3.3.0a0 (default:52f68c95e025, Jan 26 2012, 19:05:09) [GCC 4.6.1]
==   Linux-3.0.0-15-generic-x86_64-with-debian-wheezy-sid little-endian
==   /home/nadeem/src/cpython/def/build/test_python_4559
Testing with flags: sys.flags(debug=0, inspect=0, interactive=0, 
optimize=0, dont_write_bytecode=0, no_user_site=0, no_site=0, 
ignore_environment=1, verbose=0, bytes_warning=2, quiet=0)

[... snip ...]

==
FAIL: test_input_tty (test.test_builtin.BuiltinTest)
--
Traceback (most recent call last):
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1075, 
in test_input_tty
self.check_input_tty(prompt, bquux)
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1059, 
in check_input_tty
% (len(lines), child_output.read()))
AssertionError: got 0 lines in pipe but expected 2, child output was:
quux

promptCurrent thread 0x7fb3bbed5720:
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1036 
in check_input_tty
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1075 
in test_input_tty
  File /home/nadeem/src/cpython/def/Lib/unittest/case.py, line 385 in 
_executeTestPart
  File /home/nadeem/src/cpython/def/Lib/unittest/case.py, line 440 in run
  File /home/nadeem/src/cpython/def/Lib/unittest/case.py, line 492 in 
__call__
  File /home/nadeem/src/cpython/def/Lib/unittest/suite.py, line 105 in run
  File /home/nadeem/src/cpython/def/Lib/unittest/suite.py, line 67 in 
__call__
  File /home/nadeem/src/cpython/def/Lib/unittest/suite.py, line 105 in run
  File /home/nadeem/src/cpython/def/Lib/unittest/suite.py, line 67 in 
__call__
  File /home/nadeem/src/cpython/def/Lib/unittest/runner.py, line 168 in 
run
  File /home/nadeem/src/cpython/def/Lib/test/support.py, line 1369 in 
_run_suite
  File /home/nadeem/src/cpython/def/Lib/test/support.py, line 1403 in 
run_unittest
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1469 
in test_main
  File /home/nadeem/src/cpython/def/Lib/test/regrtest.py, line 1221 in 
runtest_inner
  File /home/nadeem/src/cpython/def/Lib/test/regrtest.py, line 918 in 
runtest
  File /home/nadeem/src/cpython/def/Lib/test/regrtest.py, line 710 in main
  File /home/nadeem/src/cpython/def/Lib/test/__main__.py, line 13 in 
module
  File /home/nadeem/src/cpython/def/Lib/runpy.py, line 73 in _run_code
  File /home/nadeem/src/cpython/def/Lib/runpy.py, line 160 in 
_run_module_as_main


==
FAIL: test_input_tty_non_ascii (test.test_builtin.BuiltinTest)
--
Traceback (most recent call last):
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1079, 
in test_input_tty_non_ascii
self.check_input_tty(prompté, bquux\xe9, utf-8)
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1059, 
in check_input_tty
% (len(lines), child_output.read()))
AssertionError: got 0 lines in pipe but expected 2, child output was:
quux

promptCurrent thread 0x7fb3bbed5720:
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1036 
in check_input_tty
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1079 
in test_input_tty_non_ascii
  File /home/nadeem/src/cpython/def/Lib/unittest/case.py, line 385 in 
_executeTestPart
  File /home/nadeem/src/cpython/def/Lib/unittest/case.py, line 440 in run
  File /home/nadeem/src/cpython/def/Lib/unittest/case.py, line 492 in 
__call__
  File /home/nadeem/src/cpython/def/Lib/unittest/suite.py, line 105 in run
  File /home/nadeem/src/cpython/def/Lib/unittest/suite.py, line 67 in 
__call__
  File /home/nadeem/src/cpython/def/Lib/unittest/suite.py, line 105 in run
  File /home/nadeem/src/cpython/def/Lib/unittest/suite.py, line 67 in 
__call__
  File /home/nadeem/src/cpython/def/Lib/unittest/runner.py, line 168 in 
run
  File /home/nadeem/src/cpython/def/Lib/test/support.py, line 1369 in 
_run_suite
  File /home/nadeem/src/cpython/def/Lib/test/support.py, line 1403 in 
run_unittest
  File /home/nadeem/src/cpython/def/Lib/test/test_builtin.py, line 1469 
in test_main
  File /home/nadeem/src/cpython/def/Lib/test/regrtest.py, line 1221 in 
runtest_inner
  File /home/nadeem/src/cpython/def/Lib/test/regrtest.py, line 918 in 
runtest
  File /home/nadeem/src/cpython/def/Lib/test/regrtest.py, line 710 in main
  File 

[issue11682] PEP 380 reference implementation for 3.3

2012-01-27 Thread Nick Coghlan

Nick Coghlan ncogh...@gmail.com added the comment:

Just noting that the pep380 integration branch is also available in the 
hg.python.org clone of my sandbox repo.

--
hgrepos: +107

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue11682
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue10181] Problems with Py_buffer management in memoryobject.c (and elsewhere?)

2012-01-27 Thread Nick Coghlan

Nick Coghlan ncogh...@gmail.com added the comment:

Aside from some minor comments that I included in my review, the latest patch 
gets a +1 from me.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue10181
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13887] defaultdict.get does not default to initial default but None

2012-01-27 Thread Mark Dickinson

Mark Dickinson dicki...@gmail.com added the comment:

It's certainly intentional behaviour:  all the defaultdict does is provide a 
__missing__ method.  And as explained in

http://docs.python.org/library/stdtypes.html#mapping-types-dict

No other operations or methods invoke __missing__().

So it looks to me as though this issue should be either a doc issue, or a 
feature request for 3.3.  Reclassifying as a doc issue.

--
assignee:  - docs@python
components: +Documentation -Extension Modules, Library (Lib)
nosy: +docs@python, mark.dickinson
versions: +Python 3.2, Python 3.3

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13887
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue8536] Support new features of ZLIB 1.2.4

2012-01-27 Thread abhishek

abhishek creativeabhishekg...@gmail.com added the comment:

I think New features like inflateReset2(), inflateMark(), or Z_TREES 
flags are included in python 3.2.2.

--
nosy: +abhishek_bits

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue8536
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue8536] Support new features of ZLIB 1.2.4

2012-01-27 Thread Nadeem Vawda

Nadeem Vawda nadeem.va...@gmail.com added the comment:

No, the latest revision of Modules/zlibmodule.c doesn't use any of these
new features.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue8536
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue10181] Problems with Py_buffer management in memoryobject.c (and elsewhere?)

2012-01-27 Thread Nick Coghlan

Nick Coghlan ncogh...@gmail.com added the comment:

Antoine's review picked up on several issues I missed or glossed over - I 
actually agree with his point about making most of the new APIs private rather 
than public.

With regards to exposing _testbuffer in the documentation of memoryview's hash 
support, perhaps it would be better to use a 1D bytes object + 
memoryview.cast() to get an officially supported multi-dimensional view of a 
region of memory?

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue10181
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue10181] Problems with Py_buffer management in memoryobject.c (and elsewhere?)

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

 With regards to exposing _testbuffer in the documentation of
 memoryview's hash support, perhaps it would be better to use a 1D
 bytes object + memoryview.cast() to get an officially supported
 multi-dimensional view of a region of memory?

By the way, I didn't point them, but there are other places in the
memoryview doc where _testbuffer is mentioned.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue10181
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13879] Argparse does not support subparser aliases in 2.7

2012-01-27 Thread Tim Willis

Tim Willis schadenfreude...@gmail.com added the comment:

Attaching a patch which merges aliases code from 3.2 back into 2.7.

--
keywords: +patch
Added file: http://bugs.python.org/file24339/argparse_aliases.patch

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13879
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13885] CVE-2011-3389: _ssl module always disables the CBC IV attack countermeasure

2012-01-27 Thread Benjamin Peterson

Benjamin Peterson benja...@python.org added the comment:

Thank you for handling this, Antoine!

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13885
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13879] Argparse does not support subparser aliases in 2.7

2012-01-27 Thread Tim Willis

Tim Willis schadenfreude...@gmail.com added the comment:

adding package author to nosy list

--
nosy: +bethard

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13879
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue12328] multiprocessing's overlapped PipeConnection on Windows

2012-01-27 Thread sbt

sbt shibt...@gmail.com added the comment:

Quite honestly I don't like the way that polling a pipe reads a partial message 
from the pipe.  If at all possible, polling should not modify the pipe.

I think the cleanest thing would be to switch to byte oriented pipes on Windows 
and create PipeIO which subclasses RawIOBase.  (Since socket handles are really 
just overlapped file handles, PipeIO works for them too as long as 
closesocket() is used instead of CloseHandle().)  On Unix FileIO would be used 
instead.  Then Connection can just be a thin wrapper around a file object.

Polling on Windows can then be done by creating a wrapper for an overlapped 
object which represents a zero length read, and can be used with 
WaitForMultipleObjects().  This lets us implement a select-like wait() function 
in Python which works with both sockets and Connection objects.

Attached is an extension implementing PipeIO (and the overlapped wrapper), a 
Python module implementing Connection and wait(), and a test.

--
Added file: http://bugs.python.org/file24340/PipeIO.zip

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue12328
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13887] defaultdict.get does not default to initial default but None

2012-01-27 Thread Roundup Robot

Roundup Robot devn...@psf.upfronthosting.co.za added the comment:

New changeset 089a086252fc by Benjamin Peterson in branch '3.2':
note that get() is not affected by default_factory (closes #13887)
http://hg.python.org/cpython/rev/089a086252fc

New changeset 26612ad451ad by Benjamin Peterson in branch 'default':
merge heads (#13887)
http://hg.python.org/cpython/rev/26612ad451ad

New changeset b2db66bc8e7f by Benjamin Peterson in branch '2.7':
note that get() is not affected by default_factory (closes #13887)
http://hg.python.org/cpython/rev/b2db66bc8e7f

--
nosy: +python-dev
resolution:  - fixed
stage:  - committed/rejected
status: open - closed

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13887
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue4966] Improving Lib Doc Sequence Types Section

2012-01-27 Thread Nick Coghlan

Nick Coghlan ncogh...@gmail.com added the comment:

Branch status update:
- Text Sequence Types section updated to reflect the new structure
- changed the prose that describes the relationship between printf-style 
formatting and the str.format method (deliberately removing the implication 
that the former is any real danger of disappearing - it's simply not practical 
for us to seriously contemplate killing it off)
- in the top level index, I split the old String Services section into Text 
Processing Services and Binary Data Services. The latter contains 'struct' 
and 'codecs', the former contains everthing else that used to be in String 
Services. The index pages for the two sections do cross-reference modules in 
the other section a bit (Text Processing includes a pointer directly to the 
codecs module, Binary Data includes pointers to both re and difflib). The real 
driver for this change was that struct has no place in a String Services 
section in Py3k. Since codecs could really have gone in either section, I 
mainly moved it to the binary section so that 'struct' wasn't the only module 
in there.

Major remaining update is to the Binary Sequence Types section (since I haven't 
really reviewed that at all after rearranging things.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue4966
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue4966] Improving Lib Doc Sequence Types Section

2012-01-27 Thread Nick Coghlan

Nick Coghlan ncogh...@gmail.com added the comment:

One other things the branch doesn't currently sort out is the official 
signature of count() and index().

In 3.2, for *all* of str, bytes, bytearray, tuple, list, range, the index() 
method takes the optional start:stop parameters.

collections.Sequence.index(), OTOH, does not.

count() splits the field more evenly: str, bytes, bytearray accept the extra 
parameters, but list, tuple, range and collections.Sequence only support 
counting values in the whole sequence.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue4966
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13889] str(float) and round(float) issues with FPU precision

2012-01-27 Thread Samuel Iseli

New submission from Samuel Iseli samuel.is...@gmail.com:

We are using python as an embedded scripting environment in our ERP-product.
Since upgrading to python2.7 we have serious issues with floats:

 28710.0
'2870:.0'
 round(28710.0)
2870.0

We are embedding Python in a Delphi-application.

The problem was already discussed in issue9980 and has to do with Delphi 
setting the FPU precision to 64bit (and relying on this setting) while the 
standard with Microsoft Tools is 53bits.
The routines _Py_dg_dtoa and _Py_dg_strtod in dtoa.c rely on the FPU precision 
set to 53bits.

Issue9980 was closed as won't fix but I propose to reconsider this decision 
for the following reasons:

- Delphi is still an important development environment for native win32 
applications and has excellent Python embedding support through PythonForDelphi 
(http://code.google.com/p/python4delphi).

- Ensuring 53bit before calling python code is not practical in an embedded 
python environment with extensions in delphi (python may also call code that is 
implemented in delphi).

- The changes needed in pythoncore are minimal. Tests documented in issue9980 
found no measurable performance impact.

- FPU precision switching is needed and already (partially) implemented for 
linx, where 64bit prec is standard.

Fixing this issues is absolutely vital for us, so we needed to compile a custom 
version of pythoncore.

I appended a .diff file detailling the patch.

Changes are needed in 2 places:
- pyport.h, defining the _PY_SET_53_BIT_PRECISION macros for MS visual c 
compiler
- floatobject.c, insert precision switching macros in _Py_double_round function.

In pystrtod.c the precision switching macros are already used.
pystrtod.c and floatobject.c are the only places in CPython where the dtoa.c 
functions are called.

The macros for visual-c are activated by defining HAVE_VC_FUNC_FOR_X87 
preprocessor-symbol.

Hoping for inclusion of this patch.

Cheers
Samuel

--
components: Interpreter Core
files: 120127_float_dtoa_fix_py2.7.2.diff
keywords: patch
messages: 152099
nosy: samuel.iseli
priority: normal
severity: normal
status: open
title: str(float) and round(float) issues with FPU precision
versions: Python 2.7, Python 3.1
Added file: http://bugs.python.org/file24341/120127_float_dtoa_fix_py2.7.2.diff

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13889
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13874] test_faulthandler: read_null test fails with current clang

2012-01-27 Thread Jesús Cea Avión

Changes by Jesús Cea Avión j...@jcea.es:


--
nosy: +jcea

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13874
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue4966] Improving Lib Doc Sequence Types Section

2012-01-27 Thread Ezio Melotti

Ezio Melotti ezio.melo...@gmail.com added the comment:

Have you considered/planned to rework a bit the beginning of the page too?
(Technically the issue is about the Sequence types section, but the whole page 
could be improved.)
IMHO the sections about Truth value testing, Boolean operations, and Comparison 
are out of place there, and True/False/None should be described instead.
The idea is that a developer new to Python should be able to come to this page, 
take a look at the headers and figure out what the main types are (what you did 
so far is already a good step in the right direction).

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue4966
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13889] str(float) and round(float) issues with FPU precision

2012-01-27 Thread Eric V. Smith

Changes by Eric V. Smith e...@trueblade.com:


--
nosy: +eric.smith, mark.dickinson

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13889
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13874] test_faulthandler: read_null test fails with current clang

2012-01-27 Thread STINNER Victor

STINNER Victor victor.stin...@haypocalc.com added the comment:

Oh, you can also try something else: add the volatile keyword.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13874
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13890] test_importlib failures under Windows

2012-01-27 Thread Antoine Pitrou

New submission from Antoine Pitrou pit...@free.fr:

I don't know if these are related to the latest changes, but they only appear 
on the 3.3 buildbots:

==
FAIL: test_case_insensitivity 
(importlib.test.extension.test_case_sensitivity.ExtensionModuleCaseSensitivityTest)
--
Traceback (most recent call last):
  File 
D:\cygwin\home\db3l\buildarea\3.x.bolen-windows7\build\lib\importlib\test\extension\test_case_sensitivity.py,
 line 30, in test_case_insensitivity
self.assertTrue(hasattr(loader, 'load_module'))
AssertionError: False is not true

==
FAIL: test_insensitive 
(importlib.test.source.test_case_sensitivity.CaseSensitivityTest)
--
Traceback (most recent call last):
  File 
D:\cygwin\home\db3l\buildarea\3.x.bolen-windows7\build\lib\importlib\test\source\test_case_sensitivity.py,
 line 51, in test_insensitive
self.assertTrue(hasattr(insensitive, 'load_module'))
AssertionError: False is not true

--
components: Library (Lib), Tests
messages: 152102
nosy: brett.cannon, pitrou
priority: normal
severity: normal
stage: needs patch
status: open
title: test_importlib failures under Windows
type: behavior
versions: Python 3.3

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13890
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13891] CPU DoS With Python's socket module

2012-01-27 Thread John Zimmerman

New submission from John Zimmerman johzi...@cisco.com:

Python's socket module as included in Ubuntu Lucid (python version 2.6.5) does 
not correctly handle and exclude malformed UDP packets. This means that UDP 
listening programs written in python on this version are susceptible to 
malformed-UDP-packet based DoS attacks which cause severe CPU spikes in the 
python process. The spikes to recover once the attacks cease. If malformed UDP 
packets are properly identified in the library and excluded this will protect 
all UDP listening software written in python and using the standard sockets 
module from similar attacks. Currently all such software is vulnerable to such 
attacks.

--
components: Library (Lib)
messages: 152103
nosy: johzimme
priority: normal
severity: normal
status: open
title: CPU DoS With Python's socket module
type: security
versions: Python 2.6

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13891
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13703] Hash collision security issue

2012-01-27 Thread Jim Jewett

Jim Jewett jimjjew...@gmail.com added the comment:

On Thu, Jan 26, 2012 at 8:19 PM, Antoine Pitrou rep...@bugs.python.org wrote:

 If I read your [Martin v. Löwis' ] patch correctly, collisions will
 produce additional allocations ... That's a pretty massive
 change in memory consumption for string dicts

Not in practice.

The point I first missed is that this triggers only when the hash is
*fully* equal; if the hashes are merely equal after masking, then
today's try-another-slot approach will still be used, even for
strings.

Per ( http://bugs.python.org/issue13703#msg151850 ) Marc-Andre
Lemburg's measurements, full-hash equality explains only 1 in 10,000
collisions.  From a performance standpoint, we can almost ignore a
case that rare; it is almost certainly dwarfed by resizing.

I *am* a bit concerned that the possible contents of a dictentry
change; this could cause easily-missed-in-testing breakage for
anything that treats table as an array.  That said, it doesn't seem
much worse than the search finger, and there seemed to be recent
consensus that even promising an exact dict -- subclasses not allowed
-- didn't mean that direct access was sanctioned.  So it still seems
safer than changing the de-facto iteration order.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13703
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13891] CPU DoS With Python's socket module

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

What do you call malformed UDP packets and how should they be detected by the 
library?

--
nosy: +pitrou

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13891
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13891] CPU DoS With Python's socket module

2012-01-27 Thread John Zimmerman

John Zimmerman johzi...@cisco.com added the comment:

Thanks for your quick response, I downloaded the ISIC tool and used the 
following command to identify the problem:

udpsic -s rand -d server-ip-address,port

where port is 514 (syslogd) which uses a python script to process the incoming 
messages.

The command 'netstat -lnup | grep 514' shows python as the bound application.

Thanks,
John
-Original Message-
From: Antoine Pitrou [mailto:rep...@bugs.python.org] 
Sent: Friday, January 27, 2012 12:47 PM
To: John Zimmerman (johzimme)
Subject: [issue13891] CPU DoS With Python's socket module

Antoine Pitrou pit...@free.fr added the comment:

What do you call malformed UDP packets and how should they be detected by the 
library?

--
nosy: +pitrou

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13891
___

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13891
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13891] CPU DoS With Python's socket module

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

But what does the ISIC tool report and why do you think it is a problem in 
Python's socket module?

As far as I can read on its website, ISIC is a suite of utilities to exercise 
the stability of an IP Stack and its component stacks (TCP, UDP, ICMP et. 
al.). The IP stack, as well as the UDP and TCP implementations, is in the 
system's kernel, not in Python.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13891
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13891] CPU DoS With Python's socket module

2012-01-27 Thread John Zimmerman

John Zimmerman johzi...@cisco.com added the comment:

Hi Antoine, 

The issue is that the CPU spikes to ~90% utilization for the server during the 
attack, for as long as the attack lasts.  So the theory is that Python isn't 
throttling or processing the malformed packets properly.  Copying Renier for 
any additional info.

Thanks,
John

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13891
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13891] CPU DoS With Python's socket module

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

 The issue is that the CPU spikes to ~90% utilization for the server
 during the attack, for as long as the attack lasts.  So the theory is
 that Python isn't throttling or processing the malformed packets
 properly.  Copying Renier for any additional info.

I don't know who Renier is, but Python is a programming language and
doesn't integrate a throttling facility or ad-hoc protection against
network attacks. Other programming languages will show exactly the same
behaviour. The socket module gives access to the system's low-level
socket operations, it is not a high-level network programming framework.

Besides, truly malformed packets will never get processed by Python,
they will be blocked by the kernel (e.g. because of a checksum failure).

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13891
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13868] Add hyphen doc fix

2012-01-27 Thread Sandro Tosi

Sandro Tosi sandro.t...@gmail.com added the comment:

There are a lot more occurrences of 'floating point' in our doc: are you going 
to fix them too?

--
nosy: +sandro.tosi

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13868
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13889] str(float) and round(float) issues with FPU precision

2012-01-27 Thread Mark Dickinson

Mark Dickinson dicki...@gmail.com added the comment:

Samuel, can you regenerate your patch?  The contents don't look right---I see 
changes to pyport.h, but none to floatobject.c  (and some other 
spurious-looking changes to the project file).

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13889
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13703] Hash collision security issue

2012-01-27 Thread Martin v . Löwis

Martin v. Löwis mar...@v.loewis.de added the comment:

 I *am* a bit concerned that the possible contents of a dictentry
 change; this could cause easily-missed-in-testing breakage for
 anything that treats table as an array.

This is indeed a concern: the new code needs to be exercised.
I came up with a Py_REDUCE_HASH #define; if set, the dict will only
use the lowest 3 bits of the hash, producing plenty collisions.
In that mode, the branch currently doesn't work at all due to the
remaining bugs.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13703
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13891] CPU DoS With Python's socket module

2012-01-27 Thread Charles-François Natali

Charles-François Natali neolo...@free.fr added the comment:

I don't want to be harsh, but this whole report just doesn't make sense
You're getting 90% CPU usage simply because you're flooding your server.
Closing.

--
nosy: +neologix
resolution:  - invalid
stage:  - committed/rejected
status: open - closed

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13891
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13868] Add hyphen doc fix

2012-01-27 Thread Mark Dickinson

Changes by Mark Dickinson dicki...@gmail.com:


--
nosy: +mark.dickinson

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13868
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue1003195] segfault when running smtplib example

2012-01-27 Thread Charles-François Natali

Charles-François Natali neolo...@free.fr added the comment:

Could you please indicate exactly the command you're running, and provide the 
full backtrace?

--
nosy: +neologix

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue1003195
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue8536] Support new features of ZLIB 1.2.4

2012-01-27 Thread abhishek

abhishek creativeabhishekg...@gmail.com added the comment:

Check This out
http://hg.python.org/cpython/file/b99c54acb22d/Modules/zlib/inflate.c
http://hg.python.org/cpython/file/b99c54acb22d/Modules/zlib/zconf.h
http://hg.python.org/cpython/file/b99c54acb22d/Modules/zlib/zconf.in.h

All three files contain these functions

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue8536
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13889] str(float) and round(float) issues with FPU precision

2012-01-27 Thread Mark Dickinson

Mark Dickinson dicki...@gmail.com added the comment:

I'm a bit disturbed that we're not using the _Py_SET_53BIT_PRECISION_* macros 
in _Py_double_round;  unless I'm missing something, that seems like a major 
omission.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13889
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13703] Hash collision security issue

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

[Martin's approach]
 The point I first missed is that this triggers only when the hash is
 *fully* equal; if the hashes are merely equal after masking, then
 today's try-another-slot approach will still be used, even for
 strings.

But then isn't it vulnerable to Frank's first attack as exposed in
http://mail.python.org/pipermail/python-dev/2012-January/115726.html ?

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13703
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13889] str(float) and round(float) issues with FPU precision

2012-01-27 Thread Mark Dickinson

Changes by Mark Dickinson dicki...@gmail.com:


--
type:  - behavior
versions: +Python 3.2, Python 3.3 -Python 3.1

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13889
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13703] Hash collision security issue

2012-01-27 Thread Patrick Hahn

Changes by Patrick Hahn sko...@gmail.com:


--
nosy: +skorgu

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13703
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13703] Hash collision security issue

2012-01-27 Thread Martin v . Löwis

Martin v. Löwis mar...@v.loewis.de added the comment:

 But then isn't it vulnerable to Frank's first attack as exposed in
 http://mail.python.org/pipermail/python-dev/2012-January/115726.html ?

It would be, yes. That's sad.

That could be fixed by indeed creating trees in all cases (i.e. moving
away from open addressing altogether). The memory consumption does not worry
me here; however, dictionary order will change in more cases.

Compatibility could be restored by introducing a threshold for
tree creation: if insertion visits more than N slots, go back to the
original slot and put a tree there. I'd expect that N could be small,
e.g. N==4. Lookup would then have to consider all AVL trees along the
chain of visited slots, but ISTM it could also stop after visiting N
slots.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13703
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13892] distutils handling of windows manifest isn't optimal

2012-01-27 Thread Jack Jansen

New submission from Jack Jansen jackjan...@users.sourceforge.net:

I found a problem with the handling of manifest files in the msvc9compiler. 
Distutils removes the reference to the MSVC runtime from the manifest resource, 
to enable installing the runtime system locally (i.e. to allow non-admins to 
install Python in their own directory, without needing admin access to the 
winSxS directory). Embedders of Python are suggested to the manifest for the 
MSCV runtime to their main program (i.e. the program embedding Python).

This is all a good idea, except for one use case: if you are including Python 
into a product that is itself a plugin to another product. And, of course, if 
you need to extend this Python with an extension module. In this case, you have 
no control over the manifest of the main program (which is the outer embedder). 
You have control over your own plugin (the one incorporating Python), but this 
intermediate manifest file is not taken into account when loading the 
distutils-generated .pyd file.

(imagining the amount of time it took me before I got to this analysis is left 
as an exercise to the reader:-)

I would suggest an option to distutils to skip the _remove_visual_c_ref() step.

--
assignee: tarek
components: Distutils
messages: 152119
nosy: eric.araujo, jackjansen, tarek
priority: normal
severity: normal
status: open
title: distutils handling of windows manifest isn't optimal
type: behavior
versions: Python 2.7

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13892
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13889] str(float) and round(float) issues with FPU precision

2012-01-27 Thread Roundup Robot

Roundup Robot devn...@psf.upfronthosting.co.za added the comment:

New changeset 5b884955 by Mark Dickinson in branch '3.2':
Issue #13889: Add missing _Py_SET_53BIT_PRECISION_* calls around uses of dtoa.c 
functions in float round.
http://hg.python.org/cpython/rev/5b884955

New changeset 265d35e8fe82 by Mark Dickinson in branch 'default':
Merge 3.2 - default (issue 13889)
http://hg.python.org/cpython/rev/265d35e8fe82

New changeset eaf553b063a7 by Mark Dickinson in branch '2.7':
Issue #13889: Add missing _Py_SET_53BIT_PRECISION_* calls around uses of dtoa.c 
functions in float round.
http://hg.python.org/cpython/rev/eaf553b063a7

--
nosy: +python-dev

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13889
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13890] test_importlib failures under Windows

2012-01-27 Thread Brett Cannon

Brett Cannon br...@python.org added the comment:

I was getting that error the other day on my OS X laptop, but then I thought I 
tweaked the code well enough to solve it (since I am running on a 
case-insensitive filesystem as well). It seems to stem from what nt.environ 
contains when the test sets PYTHONCASEOK and importlib._bootstrap._case_ok() 
tries to see if b'PYTHONCASEOK' is in nt.environ.

You (or anyone) have a Windows box to quickly test what nt.environ contains 
after os.environ.set('PYTHONCASEOK', '1') is called?

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13890
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13889] str(float) and round(float) issues with FPU precision

2012-01-27 Thread Mark Dickinson

Mark Dickinson dicki...@gmail.com added the comment:

 but none to floatobject.c 

Bah, reading comprehension fail.  Now that I look at your patch again, the 
floatobject.c changes are there (and pretty much match what I just committed).

I assume that the changes to pythoncore.vcproj can be disregarded, though?

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13889
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13889] str(float) and round(float) issues with FPU precision

2012-01-27 Thread Mark Dickinson

Changes by Mark Dickinson dicki...@gmail.com:


--
priority: high - normal

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13889
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13890] test_importlib failures under Windows

2012-01-27 Thread Brett Cannon

Brett Cannon br...@python.org added the comment:

Otherwise it's the nt.listdir() comparison that's failing. Probably should 
check that is returning reasonable stuff as well.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13890
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue10181] Problems with Py_buffer management in memoryobject.c (and elsewhere?)

2012-01-27 Thread Stefan Krah

Stefan Krah stefan-use...@bytereef.org added the comment:

I've added some comments on Rietveld. This time, I pasted the email
addresses manually into the CC field, apparently without success
(I didn't receive mail).

Regarding the use of _testbuffer in the docs: I agree that it's strange,
on the other hand it illustrates several examples much better (length of
a multi-dimensional view, result of cast to ND, etc).


So I'm not sure what to do. Of course I'll take out the examples if you
really don't like it.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue10181
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13703] Hash collision security issue

2012-01-27 Thread Dave Malcolm

Dave Malcolm dmalc...@redhat.com added the comment:

On Fri, 2012-01-27 at 21:02 +, Martin v. Löwis wrote:
 Martin v. Löwis mar...@v.loewis.de added the comment:
 
  But then isn't it vulnerable to Frank's first attack as exposed in
  http://mail.python.org/pipermail/python-dev/2012-January/115726.html ?
 
 It would be, yes. That's sad.
 
 That could be fixed by indeed creating trees in all cases (i.e. moving
 away from open addressing altogether). The memory consumption does not worry
 me here; however, dictionary order will change in more cases.
 
 Compatibility could be restored by introducing a threshold for
 tree creation: if insertion visits more than N slots, go back to the
 original slot and put a tree there. I'd expect that N could be small,
 e.g. N==4. Lookup would then have to consider all AVL trees along the
 chain of visited slots, but ISTM it could also stop after visiting N
 slots.

Perhaps we could combine my attack-detection code from 
  http://bugs.python.org/issue13703#msg151714
with Martin's AVL approach?  Use the ma_smalltable to track stats, and
when a dict detects that it's under attack,  *if* all the keys are
AVL-compatible, it could transition to full-AVL mode.  [I believe that
my patch successfully handles both of Frank's attacks, but I don't have
the test data - I'd be very grateful to receive a copy (securely)].

[See hybrid-approach-dmalcolm-2012-01-25-002.patch for the latest
version of attack-detection; I'm working on a rewrite in which I
restrict it to working just on pure-str dicts.  With that idea, when a
dict detects that it's under attack, *if* all the keys satisfy this
condition
  (new_hash(keyA) == new_hash(keyB)) iff (hash(keyA) == hash(keyB))
then all hash values get recalculated using new_hash (which is
randomized), which should offer protection in many common attack
scenarios, without the semantic change Alex and Antoine indicated]

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13703
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13890] test_importlib failures under Windows

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

Well apparently nt.environ doesn't reflect os.environ:

 os.environ['PYTHONCASEOK'] = '1'
 nt.environ['PYTHONCASEOK']
Traceback (most recent call last):
  File stdin, line 1, in module
KeyError: 'PYTHONCASEOK'
 nt.environ[b'PYTHONCASEOK']
Traceback (most recent call last):
  File stdin, line 1, in module
KeyError: b'PYTHONCASEOK'
 os.environ['PYTHONCASEOK']
'1'
 os.environ[b'PYTHONCASEOK']
Traceback (most recent call last):
  File stdin, line 1, in module
  File C:\t\cpython\lib\os.py, line 450, in __getitem__
value = self._data[self.encodekey(key)]
  File C:\t\cpython\lib\os.py, line 508, in encodekey
return encode(key).upper()
  File C:\t\cpython\lib\os.py, line 503, in check_str
raise TypeError(str expected, not %s % type(value).__name__)
TypeError: str expected, not bytes

This is silly and is because of how the environ mapping is implemented in 
Lib/os.py: under POXIX, os.environ reflects posix.environ (it uses the same 
underlying dict), while under Windows, os.environ uses a distinct dict from 
nt.environ.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13890
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue8536] Support new features of ZLIB 1.2.4

2012-01-27 Thread Arfrever Frehtes Taifersar Arahesis

Arfrever Frehtes Taifersar Arahesis arfrever@gmail.com added the comment:

Modules/zlib directory contains only bundled copy of zlib-1.2.5.
zlib Python module uses Modules/zlibmodule.c file.

--
nosy: +Arfrever
versions: +Python 3.3 -Python 3.2

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue8536
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13879] Argparse does not support subparser aliases in 2.7

2012-01-27 Thread Steven Bethard

Steven Bethard steven.beth...@gmail.com added the comment:

This is a new feature, not a bug, so I think the correct fix is to change the 
2.7 documentation, since at this point 2.7 can only get bugfixes, not new 
features.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13879
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13882] Add format argument for time.time(), time.clock(), ... to get a timestamp as a Decimal object

2012-01-27 Thread Arfrever Frehtes Taifersar Arahesis

Changes by Arfrever Frehtes Taifersar Arahesis arfrever@gmail.com:


--
nosy: +Arfrever

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13882
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13882] Add format argument for time.time(), time.clock(), ... to get a timestamp as a Decimal object

2012-01-27 Thread Alexander Belopolsky

Alexander Belopolsky alexander.belopol...@gmail.com added the comment:

Can we pick an API for this functionality that does not follow the worst of 
design anti-patterns?  Constant arguments, varying return type, hidden import, 
and the list can go on.

What is wrong with simply creating a new module, say hirestime with functions 
called decimal_time(), float_time(), datetime_time() and whatever else you 
would like.  Let's keep the good old 'time' module simple.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13882
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13874] test_faulthandler: read_null test fails with current clang

2012-01-27 Thread Stefan Krah

Stefan Krah stefan-use...@bytereef.org added the comment:

Yes, volatile works, too. That's probably the best solution.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13874
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13882] Add format argument for time.time(), time.clock(), ... to get a timestamp as a Decimal object

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

Well, creating a separate module is an anti-pattern in itself. calendar vs. 
time vs. datetime, anyone?
I would instead propose separate functions: decimal_time, decimal_clock... or, 
if you prefer, time_decimal and so on.

--
nosy: +pitrou

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13882
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13874] test_faulthandler: read_null test fails with current clang

2012-01-27 Thread Stefan Krah

Stefan Krah stefan-use...@bytereef.org added the comment:

Well, to be completely unambiguous. This works:

diff -r d2cf8a34ddf9 Modules/faulthandler.c
--- a/Modules/faulthandler.cThu Jan 26 00:15:07 2012 -0800
+++ b/Modules/faulthandler.cFri Jan 27 23:16:27 2012 +0100
@@ -943,7 +943,7 @@
 static PyObject *
 faulthandler_read_null(PyObject *self, PyObject *args)
 {
-int *x = NULL, y;
+volatile int *x = NULL, y;
 int release_gil = 0;
 if (!PyArg_ParseTuple(args, |i:_read_null, release_gil))

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13874
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13882] Add format argument for time.time(), time.clock(), ... to get a timestamp as a Decimal object

2012-01-27 Thread Alexander Belopolsky

Alexander Belopolsky alexander.belopol...@gmail.com added the comment:

On Fri, Jan 27, 2012 at 5:17 PM, Antoine Pitrou rep...@bugs.python.org wrote:
 Well, creating a separate module is an anti-pattern in itself. calendar vs. 
 time vs. datetime, anyone?

Are you serious? Since the invention of structural programming,
creating a separate module for distinct functionality has been one of
the most powerful design techniques.  If I recall correctly, most of
the original GoF patterns were about separating functionality into a
separate module or a separate class.  The calendar module is indeed a
historical odd-ball, but what is wrong with time and datetime?

--
nosy: +Alexander.Belopolsky

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13882
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13882] Add format argument for time.time(), time.clock(), ... to get a timestamp as a Decimal object

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

 Are you serious? Since the invention of structural programming,
 creating a separate module for distinct functionality has been one of
 the most powerful design techniques.

Yes, I'm serious, and I don't see what structural programming or design
patterns have to do with it.

And we're not even talking about distinct functionality, we're talking
about the exact same functionality, except that the return type has
slightly different implementation characteristics. Doing a module split
is foolish.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13882
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13882] Add format argument for time.time(), time.clock(), ... to get a timestamp as a Decimal object

2012-01-27 Thread Alexander Belopolsky

Changes by Alexander Belopolsky alexander.belopol...@gmail.com:


--
nosy: +mark.dickinson

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13882
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13836] Define key failed

2012-01-27 Thread Terry J. Reedy

Terry J. Reedy tjre...@udel.edu added the comment:

We are aware that key-binding deletion is not working correctly.
I am pretty sure this report has the same underlying issue as #4765.

--
nosy: +serwy, terry.reedy
resolution:  - duplicate
status: open - closed
superseder:  - IDLE fails to Delete Custom Key Set properly

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13836
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue4765] IDLE fails to Delete Custom Key Set properly

2012-01-27 Thread Terry J. Reedy

Terry J. Reedy tjre...@udel.edu added the comment:

#13836 is another report of key-binding deletion not working correctly, 
although IDLE did eventually open and allow re-deletion.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue4765
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13839] -m pstats should combine all the profiles given as arguments

2012-01-27 Thread Terry J. Reedy

Changes by Terry J. Reedy tjre...@udel.edu:


--
nosy: +georg.brandl
stage:  - test needed
versions:  -Python 2.6, Python 2.7, Python 3.1, Python 3.2, Python 3.4

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13839
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13841] multiprocessing should use sys.exit() where possible

2012-01-27 Thread Terry J. Reedy

Changes by Terry J. Reedy tjre...@udel.edu:


--
stage:  - test needed
versions:  -Python 3.2

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13841
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13893] Make CGIHTTPServer capable of redirects (and status other than 200)

2012-01-27 Thread Giovanni Funchal

New submission from Giovanni Funchal gafunc...@gmail.com:

GIHTTPServer.py is a very handy module for quickly setting up a full HTTP 
server with CGI support. However, I noticed that it doesn't support responses 
other than 200 OK. So, for instance if the page wants to do a redirect 
(response 303), it just isn't supported. It's documented as so, but still I 
think this is a major drawback that can be easily overcome.

I have attached a patch against 2.7. I'd be happy to port it to dev branch if 
help provided as I'm new to Python. Reviews/suggestions more than welcome.

--
components: Library (Lib)
files: CGIHTTPServer.patch
keywords: patch
messages: 152137
nosy: Giovanni.Funchal
priority: normal
severity: normal
status: open
title: Make CGIHTTPServer capable of redirects (and status other than 200)
type: enhancement
versions: Python 2.6, Python 2.7, Python 3.1, Python 3.2, Python 3.3, Python 3.4
Added file: http://bugs.python.org/file24342/CGIHTTPServer.patch

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13893
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13882] Add format argument for time.time(), time.clock(), ... to get a timestamp as a Decimal object

2012-01-27 Thread Eric V. Smith

Changes by Eric V. Smith e...@trueblade.com:


--
nosy: +eric.smith

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13882
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13846] Add time.monotonic() function

2012-01-27 Thread Terry J. Reedy

Terry J. Reedy tjre...@udel.edu added the comment:

Do we actually yet another function, or could this be covered by adding a 
parameter such as monotonic=False, perhaps to wallclock().

--
nosy: +terry.reedy
stage:  - patch review
type:  - enhancement

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13846
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13847] Catch time(), ftime(), localtime() and clock() errors

2012-01-27 Thread Terry J. Reedy

Changes by Terry J. Reedy tjre...@udel.edu:


--
stage:  - needs patch
type:  - enhancement

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13847
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13848] io.open() doesn't check for embedded NUL characters

2012-01-27 Thread Terry J. Reedy

Terry J. Reedy tjre...@udel.edu added the comment:

See also #13849

--
nosy: +terry.reedy

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13848
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13849] Add tests for NUL checking in certain strs

2012-01-27 Thread Terry J. Reedy

Terry J. Reedy tjre...@udel.edu added the comment:

This is a bit related to #13848 files 2 seconds earlier.

--
nosy: +terry.reedy

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13849
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13866] {urllib, urllib.parse}.urlencode should not use quote_plus

2012-01-27 Thread Terry J. Reedy

Changes by Terry J. Reedy tjre...@udel.edu:


--
nosy: +orsenthil
stage:  - test needed
type:  - enhancement
versions:  -Python 2.7, Python 3.1, Python 3.2, Python 3.4

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13866
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13849] Add tests for NUL checking in certain strs

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

Well, adding tests is certainly useful to avoid regressions in CPython (not 
only PyPy or Jython). It seems to me that the only reasonable discussion is 
whether they should be committed to 2.7 and 3.2, or only the default branch.

(I personally like adding tests to stable branches as well, since that avoids 
potential regressions in further bugfix releases)

If we had had such tests from the beginning, 3.x wouldn't have regressed in 
that matter (see #13848).

--
nosy: +pitrou
versions: +Python 3.2, Python 3.3

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13849
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13867] misleading comment in weakrefobject.h

2012-01-27 Thread Terry J. Reedy

Changes by Terry J. Reedy tjre...@udel.edu:


--
components: +Library (Lib) -Documentation, Extension Modules
nosy: +fdrake, pitrou

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13867
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13867] misleading comment in weakrefobject.h

2012-01-27 Thread Antoine Pitrou

Antoine Pitrou pit...@free.fr added the comment:

Ha, good catch. The macro could be fixed, or the comment simply be dropped.

--
versions: +Python 2.7, Python 3.2, Python 3.3

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13867
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13893] Make CGIHTTPServer capable of redirects (and status other than 200)

2012-01-27 Thread Antoine Pitrou

Changes by Antoine Pitrou pit...@free.fr:


--
nosy: +orsenthil

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13893
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue4966] Improving Lib Doc Sequence Types Section

2012-01-27 Thread Nick Coghlan

Nick Coghlan ncogh...@gmail.com added the comment:

Yeah, the basic layout of this entire section has been in place for a *long* 
time 
(http://docs.python.org/release/1.4/lib/node4.html#SECTION0031)

Some aspects haven't really aged all that well, as people have made minimalist 
changes to document new features without necessarily stepping back to see if 
the overall structure still makes sense.

However, rather than dumping one massive patch on python-checkins, I think it 
makes sense to try to tackle it by section (i.e. sequences + related changes 
for now, then look at mappings, sets, truth values, comparisons and numbers 
separately).

One thing I do plan to do is a quick scan for places that reference into the 
sequence types section to see if they should be adjusted (e.g. see if there's 
some duplication in the language reference that could be reduced, or 
cross-references in the glossary to add or update)

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue4966
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue1625] bz2.BZ2File doesn't support multiple streams

2012-01-27 Thread Jesús Cea Avión

Jesús Cea Avión j...@jcea.es added the comment:

I think this support should be backported to Python 2.7 and 3.2. Current code 
can't decompress files generated by pbzip2, fairly popular. I would consider 
that a bug, not a feature request.

I am just recompressing a 77GB file because of this :-(.

--
nosy: +jcea

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue1625
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue10181] Problems with Py_buffer management in memoryobject.c (and elsewhere?)

2012-01-27 Thread Nick Coghlan

Nick Coghlan ncogh...@gmail.com added the comment:

Radical suggestion: make it public as collections.simple_ndarray?

(prefixing with simple_ to be explicit that this is not even *close* to being 
the all-singing, all-dancing NumPy.ndarray)

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue10181
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13877] segfault when running smtplib example

2012-01-27 Thread Jesús Cea Avión

Changes by Jesús Cea Avión j...@jcea.es:


--
nosy: +jcea

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13877
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue1003195] segfault when running smtplib example

2012-01-27 Thread Jesús Cea Avión

Changes by Jesús Cea Avión j...@jcea.es:


--
nosy: +jcea

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue1003195
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13703] Hash collision security issue

2012-01-27 Thread Benjamin Peterson

Benjamin Peterson benja...@python.org added the comment:

For the record, Barry and I agreed on what we'll be doing for stable releases 
[1]. David says he should have a patch soon.

[1] http://mail.python.org/pipermail/python-dev/2012-January/115892.html

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13703
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue4765] IDLE fails to Delete Custom Key Set properly

2012-01-27 Thread Roger Serwy

Roger Serwy roger.se...@gmail.com added the comment:

I am unable to reproduce this bug with the latest development versions in the 
2.7 and 3.3 branches. 

Can someone verify this as well?

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue4765
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue13874] test_faulthandler: read_null test fails with current clang

2012-01-27 Thread Jesús Cea Avión

Jesús Cea Avión j...@jcea.es added the comment:

That makes x and y volatile.

--

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13874
___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



  1   2   >