[issue14984] netrc module allows read of non-secured .netrc file

2012-06-09 Thread bruno Piguet
bruno Piguet bruno.pig...@gmail.com added the comment: Do you agree that the attached patch could be a practical solution ? The patch is for the 2.6 version of the lib. Transposition to other versions should be trivial. If we don't want to break backward compatibility, the solution is to add a

[issue10053] Don’t close fd when FileIO.__init__ fails

2012-06-09 Thread Hynek Schlawack
Hynek Schlawack h...@ox.cx added the comment: Anyone? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue10053 ___ ___ Python-bugs-list mailing list

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-09 Thread Hynek Schlawack
Hynek Schlawack h...@ox.cx added the comment: Martin, are you still committed to this? I still think code duplication is bad (especially for security related code) but I’d be willing to write a fwalk-less version so it doesn’t look like I’m just defending my code here. --

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-09 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Martin, are you still committed to this? Yes, I'll provide a patch RSN. I doubt that there will be that much code duplication. -- ___ Python tracker rep...@bugs.python.org

[issue15021] xmlrpc server hangs

2012-06-09 Thread Abhishek Singh
Abhishek Singh abhishekrsi...@gmail.com added the comment: I have a pretty complicated setup. 100's of threads, xmlrpc being in the main thread and providing show routines for my program. I have 10's of such processes doing some heavy duty simulation/crunching. The threads and program is in

[issue14984] netrc module allows read of non-secured .netrc file

2012-06-09 Thread R. David Murray
R. David Murray rdmur...@bitdance.com added the comment: Thanks for the patch. I think the extra check should be done unconditionally in the case where we've looked up the default .netrc file. Adding a feature to 3.3 to provide an optional check for other files (with default False) would

[issue13598] string.Formatter doesn't support empty curly braces {}

2012-06-09 Thread Ramchandra Apte
Ramchandra Apte maniandra...@gmail.com added the comment: Its not a bug though it has maintenance problems because if you change manual is False to not manual it no longer works correctly. -- ___ Python tracker rep...@bugs.python.org

[issue14971] (unittest) loadTestsFromName does not work on method with a decorator

2012-06-09 Thread Michael Foord
Michael Foord mich...@voidspace.org.uk added the comment: Patch looks great - thanks David. -- assignee: docs@python - michael.foord ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14971 ___

[issue15040] stdlib compatability with pypy: mailbox.py

2012-06-09 Thread mattip
New submission from mattip matti.pi...@gmail.com: These are changes necessary to mailbox.py and its tests so that tests pass (windows platform) on pypy 1.9.0. Files must be explicitly closed on pypy. I would like to submit these as a compatability issue type, but that category does not

[issue13598] string.Formatter doesn't support empty curly braces {}

2012-06-09 Thread Vinay Sajip
Vinay Sajip vinay_sa...@yahoo.co.uk added the comment: it has maintenance problems because if you change manual is False to not manual it no longer works correctly. So you should probably comment the initialisation appropriately. -- ___ Python

[issue15040] stdlib compatability with pypy: mailbox.py

2012-06-09 Thread R. David Murray
R. David Murray rdmur...@bitdance.com added the comment: I see some code changes, but no added tests for those code changes. msg.fp doesn't exist in Python3. I'd like to understand those changes better, but I don't know when I'll have the time or if it is worth the effort. -- nosy:

[issue15040] stdlib compatability with pypy: mailbox.py

2012-06-09 Thread R. David Murray
R. David Murray rdmur...@bitdance.com added the comment: Oh, and the code changes should presumably be applied to Python3 as well (once there are tests), so I've added those versions. It might be better to have two patches, one for the close of _file, and the other for the msg.fp stuff (since

[issue15041] tkinter see also list is from Python2

2012-06-09 Thread Daniel Swanson
New submission from Daniel Swanson popcorn.tomato.d...@gmail.com: I was looking for information about menus in tkinter and checked the see also list. The second is copyrighted 1999, the third says Python 2.5 and the first is pretty much just links to the second and third. The forth is a book.

[issue15041] tkinter documentation see also list in Python3 is from Python2

2012-06-09 Thread Daniel Swanson
Changes by Daniel Swanson popcorn.tomato.d...@gmail.com: -- title: tkinter see also list is from Python2 - tkinter documentation see also list in Python3 is from Python2 type: - enhancement ___ Python tracker rep...@bugs.python.org

[issue14680] pydoc with -w option does not work for a lot of help topics

2012-06-09 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: Thanks for the report. Are you interested in making a patch? Also, could you tell if the bug happens in 3.2? -- nosy: +eric.araujo stage: - needs patch ___ Python tracker rep...@bugs.python.org

[issue14680] pydoc with -w option does not work for a lot of help topics

2012-06-09 Thread Éric Araujo
Changes by Éric Araujo mer...@netwok.org: -- assignee: docs@python - components: +Library (Lib) -Documentation nosy: -docs@python ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14680 ___

[issue14616] subprocess docs should mention pipes.quote/shlex.quote

2012-06-09 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: Text LGTM; I haven’t looked at the position in the doc file though. Sandro, once again I’m adding you to nosy in the hope that you’ll have time to make a review and maybe a commit, with my thanks! -- nosy: +sandro.tosi

[issue14616] subprocess docs should mention pipes.quote/shlex.quote

2012-06-09 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: Please also take my note about pipes.quote in my OP into account. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14616 ___

[issue14843] support define_macros / undef_macros in setup.cfg

2012-06-09 Thread Éric Araujo
Changes by Éric Araujo mer...@netwok.org: Added file: http://bugs.python.org/file25870/ac776ef41428.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14843 ___

[issue14848] Use shutil.move instead of os.rename in packaging

2012-06-09 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: OK. Can you paste the full traceback for the error? -- stage: - needs patch title: os.rename should not be used - Use shutil.move instead of os.rename in packaging ___ Python tracker

[issue14843] support define_macros / undef_macros in setup.cfg

2012-06-09 Thread Éric Araujo
Changes by Éric Araujo mer...@netwok.org: Removed file: http://bugs.python.org/file25870/ac776ef41428.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14843 ___

[issue14843] support define_macros / undef_macros in setup.cfg

2012-06-09 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: Looks like the diff generator can’t be used for not up-to-date clones. Could you update a diff? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14843

[issue14850] The inconsistency of codecs.charmap_decode

2012-06-09 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: What is the use case for passing a string subclass to charmap_decode? Or in other words, how did you stumble upon the bug? -- nosy: +eric.araujo ___ Python tracker rep...@bugs.python.org

[issue14927] add Do not supply 'int' argument to random.shuffle docstring

2012-06-09 Thread Éric Araujo
Changes by Éric Araujo mer...@netwok.org: -- keywords: +easy nosy: +sandro.tosi stage: - needs patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14927 ___

[issue14968] Section Inplace Operators of :mod:`operator` should be a subsection

2012-06-09 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: Sandro: I added 2.7 to indicate it should be checked too. As you said, the bug wasn’t there, because there is no In-place Operators section (which I think there should be, i.e. backporting #9717 (if you do that, please use a full commit

[issue15003] make PyNamespace_New() public

2012-06-09 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: The type is available as types.SimpleNamespace (sorry for being OT) Is this documented in whatsnew? Also, I remember a discussion about making it public or not, but don’t recall a decision. I personally find it bad that we have structseqs

[issue3955] maybe doctest doesn't understand unicode_literals?

2012-06-09 Thread R. David Murray
R. David Murray rdmur...@bitdance.com added the comment: I fail to see the problem here. If the module has 'from __future__ import unicode_literals, then the docstring output clauses would need to be changed to reflect the fact that the input literals are now unicode. What am I missing?

[issue2020] _sha256 module missing if openssl is not in a normal directory.

2012-06-09 Thread R. David Murray
R. David Murray rdmur...@bitdance.com added the comment: Since there's been no response, I'm closing this. -- keywords: +buildbot nosy: +r.david.murray resolution: - out of date stage: - committed/rejected status: pending - closed ___ Python

[issue6165] strftime incorrectly processes DST flag when passed time touples

2012-06-09 Thread R. David Murray
R. David Murray rdmur...@bitdance.com added the comment: Closing because of lack of response. -- nosy: +r.david.murray status: pending - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue6165

[issue9722] PyObject_Print with Visual Studio 2010

2012-06-09 Thread R. David Murray
Changes by R. David Murray rdmur...@bitdance.com: -- status: pending - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue9722 ___ ___