reopen 555359 thanks * Alexander Zangerl <a...@snafu.priv.at>, 2009-11-12, 11:32:
the pexpect shipped with duplicity is not the same as the standard module; it contains modifications made by duplicity's upstream and as such is not a "convenience copy".
Having local modifications does not make it any better from the security or the overall quality point of view. Quite contrary.
i'm not about to second-guess upstream in this regard, therefore i'm closing this bug.
Did you actually check what are these modifications? Here, I did: $ diff -ur pexpect-2.3/ duplicity-0.6.05/src | grep -v '^Only in' diff -ur pexpect-2.3/pexpect.py duplicity-0.6.05/src/pexpect.py --- pexpect-2.3/pexpect.py 2007-12-27 03:40:52.000000000 +0100 +++ duplicity-0.6.05/src/pexpect.py 2009-08-28 16:47:42.000000000 +0200 @@ -60,7 +60,7 @@ Pexpect Copyright (c) 2008 Noah Spurrier http://pexpect.sourceforge.net/ -$Id: pexpect.py 507 2007-12-27 02:40:52Z noah $ +$Id: pexpect.py,v 1.1 2009/01/06 22:11:37 loafman Exp $ """ try: @@ -85,7 +85,7 @@ support it. Pexpect is intended for UNIX-like operating systems.""") __version__ = '2.3' -__revision__ = '$Revision: 399 $' +__revision__ = '$Revision: 1.1 $' __all__ = ['ExceptionPexpect', 'EOF', 'TIMEOUT', 'spawn', 'run', 'which', 'split_command_line', '__version__', '__revision__'] -- Jakub Wilk
signature.asc
Description: Digital signature
