[issue14984] netrc module allows read of non-secured .netrc file
bruno Piguet bruno.pig...@gmail.com added the comment: Do you agree that the attached patch could be a practical solution ? The patch is for the 2.6 version of the lib. Transposition to other versions should be trivial. If we don't want to break backward compatibility, the solution is to add a optional behavior flag argument, something like def __init__(self, file=None, sec_mode=False): and have the default value be False for old versions and True for 3.3 and further. -- Added file: http://bugs.python.org/file25868/patch_netrc_2.6.txt ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14984 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue10053] Don’t close fd when FileIO.__init__ fails
Hynek Schlawack h...@ox.cx added the comment: Anyone? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue10053 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue4489] shutil.rmtree is vulnerable to a symlink attack
Hynek Schlawack h...@ox.cx added the comment: Martin, are you still committed to this? I still think code duplication is bad (especially for security related code) but I’d be willing to write a fwalk-less version so it doesn’t look like I’m just defending my code here. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue4489 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue4489] shutil.rmtree is vulnerable to a symlink attack
Martin v. Löwis mar...@v.loewis.de added the comment: Martin, are you still committed to this? Yes, I'll provide a patch RSN. I doubt that there will be that much code duplication. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue4489 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue15021] xmlrpc server hangs
Abhishek Singh abhishekrsi...@gmail.com added the comment: I have a pretty complicated setup. 100's of threads, xmlrpc being in the main thread and providing show routines for my program. I have 10's of such processes doing some heavy duty simulation/crunching. The threads and program is in C. I use swig routines to throw in my show framework. There is no traceback - it is just stuck and unresponsive. If I quit my client, the socket gets closed and it recovers. But it is annoying to do so, and it can get stuck again :(. I will try your timeout suggestion, but having a infinite timeout might help given my system is loaded with lots of competing (for CPU) threads. I am running the Simple xmlrpc server. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15021 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14984] netrc module allows read of non-secured .netrc file
R. David Murray rdmur...@bitdance.com added the comment: Thanks for the patch. I think the extra check should be done unconditionally in the case where we've looked up the default .netrc file. Adding a feature to 3.3 to provide an optional check for other files (with default False) would then be an additional enhancement, and I think a good one. That should be a separate patch, probably even a separate issue. I don't think the parse error is the right thing to raise, but I'm not sure what is. An OSError, perhaps? I'm adding the 2.6 release manager to see if he thinks this is of sufficient importance to go into a 2.6 release. -- nosy: +barry ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14984 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13598] string.Formatter doesn't support empty curly braces {}
Ramchandra Apte maniandra...@gmail.com added the comment: Its not a bug though it has maintenance problems because if you change manual is False to not manual it no longer works correctly. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13598 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14971] (unittest) loadTestsFromName does not work on method with a decorator
Michael Foord mich...@voidspace.org.uk added the comment: Patch looks great - thanks David. -- assignee: docs@python - michael.foord ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14971 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue15040] stdlib compatability with pypy: mailbox.py
New submission from mattip matti.pi...@gmail.com: These are changes necessary to mailbox.py and its tests so that tests pass (windows platform) on pypy 1.9.0. Files must be explicitly closed on pypy. I would like to submit these as a compatability issue type, but that category does not exist, so I used behavior. This is the first in a series of a number of such patches, I think there will be about 20. -- components: Library (Lib) files: mailbox.patch keywords: patch messages: 162564 nosy: mattip priority: normal severity: normal status: open title: stdlib compatability with pypy: mailbox.py type: behavior versions: Python 2.7 Added file: http://bugs.python.org/file25869/mailbox.patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15040 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13598] string.Formatter doesn't support empty curly braces {}
Vinay Sajip vinay_sa...@yahoo.co.uk added the comment: it has maintenance problems because if you change manual is False to not manual it no longer works correctly. So you should probably comment the initialisation appropriately. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13598 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue15040] stdlib compatability with pypy: mailbox.py
R. David Murray rdmur...@bitdance.com added the comment: I see some code changes, but no added tests for those code changes. msg.fp doesn't exist in Python3. I'd like to understand those changes better, but I don't know when I'll have the time or if it is worth the effort. -- nosy: +r.david.murray ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15040 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue15040] stdlib compatability with pypy: mailbox.py
R. David Murray rdmur...@bitdance.com added the comment: Oh, and the code changes should presumably be applied to Python3 as well (once there are tests), so I've added those versions. It might be better to have two patches, one for the close of _file, and the other for the msg.fp stuff (since that doesn't exist in Python3). -- components: +email nosy: +barry stage: - patch review versions: +Python 3.2, Python 3.3 ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15040 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue15041] tkinter see also list is from Python2
New submission from Daniel Swanson popcorn.tomato.d...@gmail.com: I was looking for information about menus in tkinter and checked the see also list. The second is copyrighted 1999, the third says Python 2.5 and the first is pretty much just links to the second and third. The forth is a book. It is my opinion that these resources should be updated. -- assignee: docs@python components: Documentation messages: 162568 nosy: docs@python, weirdink13 priority: normal severity: normal status: open title: tkinter see also list is from Python2 versions: Python 3.2 ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15041 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue15041] tkinter documentation see also list in Python3 is from Python2
Changes by Daniel Swanson popcorn.tomato.d...@gmail.com: -- title: tkinter see also list is from Python2 - tkinter documentation see also list in Python3 is from Python2 type: - enhancement ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15041 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14680] pydoc with -w option does not work for a lot of help topics
Éric Araujo mer...@netwok.org added the comment: Thanks for the report. Are you interested in making a patch? Also, could you tell if the bug happens in 3.2? -- nosy: +eric.araujo stage: - needs patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14680 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14680] pydoc with -w option does not work for a lot of help topics
Changes by Éric Araujo mer...@netwok.org: -- assignee: docs@python - components: +Library (Lib) -Documentation nosy: -docs@python ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14680 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14616] subprocess docs should mention pipes.quote/shlex.quote
Éric Araujo mer...@netwok.org added the comment: Text LGTM; I haven’t looked at the position in the doc file though. Sandro, once again I’m adding you to nosy in the hope that you’ll have time to make a review and maybe a commit, with my thanks! -- nosy: +sandro.tosi ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14616 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14616] subprocess docs should mention pipes.quote/shlex.quote
Éric Araujo mer...@netwok.org added the comment: Please also take my note about pipes.quote in my OP into account. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14616 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14843] support define_macros / undef_macros in setup.cfg
Changes by Éric Araujo mer...@netwok.org: Added file: http://bugs.python.org/file25870/ac776ef41428.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14843 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14848] Use shutil.move instead of os.rename in packaging
Éric Araujo mer...@netwok.org added the comment: OK. Can you paste the full traceback for the error? -- stage: - needs patch title: os.rename should not be used - Use shutil.move instead of os.rename in packaging ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14848 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14843] support define_macros / undef_macros in setup.cfg
Changes by Éric Araujo mer...@netwok.org: Removed file: http://bugs.python.org/file25870/ac776ef41428.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14843 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14843] support define_macros / undef_macros in setup.cfg
Éric Araujo mer...@netwok.org added the comment: Looks like the diff generator can’t be used for not up-to-date clones. Could you update a diff? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14843 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14850] The inconsistency of codecs.charmap_decode
Éric Araujo mer...@netwok.org added the comment: What is the use case for passing a string subclass to charmap_decode? Or in other words, how did you stumble upon the bug? -- nosy: +eric.araujo ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14850 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14927] add Do not supply 'int' argument to random.shuffle docstring
Changes by Éric Araujo mer...@netwok.org: -- keywords: +easy nosy: +sandro.tosi stage: - needs patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14927 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue14968] Section Inplace Operators of :mod:`operator` should be a subsection
Éric Araujo mer...@netwok.org added the comment: Sandro: I added 2.7 to indicate it should be checked too. As you said, the bug wasn’t there, because there is no In-place Operators section (which I think there should be, i.e. backporting #9717 (if you do that, please use a full commit message instead of “backport of skldgjlkg”)). -- resolution: - fixed stage: commit review - committed/rejected status: open - closed versions: -Python 2.7 ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue14968 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue15003] make PyNamespace_New() public
Éric Araujo mer...@netwok.org added the comment: The type is available as types.SimpleNamespace (sorry for being OT) Is this documented in whatsnew? Also, I remember a discussion about making it public or not, but don’t recall a decision. I personally find it bad that we have structseqs for most things, dicts in PEP 418 get_clock_info return values, and now simplenamespace for sys.implementation. -- nosy: +eric.araujo ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15003 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue3955] maybe doctest doesn't understand unicode_literals?
R. David Murray rdmur...@bitdance.com added the comment: I fail to see the problem here. If the module has 'from __future__ import unicode_literals, then the docstring output clauses would need to be changed to reflect the fact that the input literals are now unicode. What am I missing? -- assignee: tim_one - nosy: +r.david.murray resolution: - invalid stage: - committed/rejected status: open - pending ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue3955 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue2020] _sha256 module missing if openssl is not in a normal directory.
R. David Murray rdmur...@bitdance.com added the comment: Since there's been no response, I'm closing this. -- keywords: +buildbot nosy: +r.david.murray resolution: - out of date stage: - committed/rejected status: pending - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue2020 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue6165] strftime incorrectly processes DST flag when passed time touples
R. David Murray rdmur...@bitdance.com added the comment: Closing because of lack of response. -- nosy: +r.david.murray status: pending - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue6165 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue9722] PyObject_Print with Visual Studio 2010
Changes by R. David Murray rdmur...@bitdance.com: -- status: pending - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue9722 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
