[issue24928] mock.patch.dict spoils order of items in collections.OrderedDict

2015-11-14 Thread Serhiy Storchaka

Changes by Serhiy Storchaka :


--
keywords: +needs review
nosy: +michael.foord
stage: needs patch -> patch review

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25168] test_datetime.test_strptime() random failures on "s390x SLES" buildbots

2015-11-14 Thread Roundup Robot

Roundup Robot added the comment:

New changeset 139c18943d9b by Martin Panter in branch 'default':
Issue #25168: Temporary timezone and cache debugging
https://hg.python.org/cpython/rev/139c18943d9b

--
nosy: +python-dev

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25624] shutil.make_archive makes invalid directory entries

2015-11-14 Thread Dingyuan Wang

Dingyuan Wang added the comment:

$ mkdir foo; touch foo/a.txt; python3 -c "import shutil; 
shutil.make_archive('foo', 'zip', base_dir='foo')"; unzip -t foo.zip
Archive:  foo.zip
testing: foo/
  error:  invalid compressed data to inflate
testing: foo/a.txtOK
At least one error was detected in foo.zip.

(This affects 2.7, 3.4+)

--
versions: +Python 2.7, Python 3.4

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25168] test_datetime.test_strptime() random failures on "s390x SLES" buildbots

2015-11-14 Thread Martin Panter

Martin Panter added the comment:

I wonder if this has anything to do with _strptime._TimeRE_cache. This seems to 
get initialized when _strptime is first imported. Some of the tests in 
datetimetester temporarily set the timezone to -0500 EST, and another to UTC, 
but they change it back afterwards. So I cannot see how it could have an 
effect, but I don’t have a better theory.

>>> import _strptime  # Regular expression cache is initialized
>>> _strptime._TimeRE_cache["Z"]  # I don't have a time zone set
'(?Pgmt|utc)'
>>> import os, time
>>> os.environ["TZ"] = 'EST+05EDT,M3.2.0,M11.1.0'
>>> time.tzset()
>>> time.tzname
('EST', 'EDT')
>>> from datetime import datetime
>>> datetime.strptime("-0500 EST", "%z %Z")  # Using original cache
Traceback (most recent call last):
  File "", line 1, in 
  File "/home/proj/python/cpython/Lib/_strptime.py", line 555, in 
_strptime_datetime
tt, fraction = _strptime(data_string, format)
  File "/home/proj/python/cpython/Lib/_strptime.py", line 356, in _strptime
(data_string, format))
ValueError: time data '-0500 EST' does not match format '%z %Z'

--
components: +Tests
nosy: +martin.panter
type:  -> behavior

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25624] shutil.make_archive makes invalid directory entries

2015-11-14 Thread Dingyuan Wang

New submission from Dingyuan Wang:

The _make_zipfile in shutil uses ZIP_DEFLATED compression by default, and the 
fix introduced by #24982 adds directory entries. In zipfile.ZipFile.write, 
directories is added as 0 file_size, 0 compress_size, regardless of the 
compression method. Deflate will compress an empty string as \x03\x00, thus the 
directory entries become incorrect.

The command line interface of zipfile is correct. Shutil can be fixed as 
zipfile.main. As a directory entry with compression methods other than 
ZIP_STORED is meaningless, zipfile.write and (maybe) zipfile.writestr should 
always write a ZIP_STORED header for directory entries to avoid the above 
problem occuring by programming mistakes.

--
components: Library (Lib)
messages: 254647
nosy: gumblex
priority: normal
severity: normal
status: open
title: shutil.make_archive makes invalid directory entries
type: behavior
versions: Python 3.5

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25623] Keep the link to Python implementation of OrderedDict

2015-11-14 Thread Serhiy Storchaka

New submission from Serhiy Storchaka:

For now C implementation of OrderedDict totally overrides Python implementation.

>>> import collections
>>> collections.OrderedDict.__init__
  
  

The only way to get Python implementation of OrderedDict is to block the 
_collections module and reload the collections module.

>>> del sys.modules['collections']
>>> del sys.modules['collections.abc']
>>> sys.modules['_collections'] = None
>>> import collections
>>> collections.OrderedDict.__init__


But this also blocks collections.deque, collections.defaultdict, and the 
acceleration of collections.Counter.

As long as C implementation of OrderedDict still has some bugs (and I'm not 
sure we will have fixed all them before releasing 3.5.1), I think it would be 
good to have a workaround for applications that encounter one of still not 
fixed bugs.

I propose to keep a reference to Python implementation as 
collections._OrderedDict. This is not a public interface and we don't promise 
existing this name in future releases. This is just a way to make a workaround 
for the time while C implementation is not stable enough. I hope we will got 
rid from it in 3.7.

A workaround for an application that suffers from OrderedDict bug:

import collections
try:
collections.OrderedDict = collections._OrderedDict
except AttributeError:
pass

--
components: Library (Lib)
files: OrderedDict_python_impl.patch
keywords: patch
messages: 254645
nosy: eric.snow, rhettinger, serhiy.storchaka
priority: normal
severity: normal
stage: patch review
status: open
title: Keep the link to Python implementation of OrderedDict
type: enhancement
versions: Python 3.5, Python 3.6
Added file: http://bugs.python.org/file41038/OrderedDict_python_impl.patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25569] Memory leak in SSLSocket.getpeercert()

2015-11-14 Thread Roundup Robot

Roundup Robot added the comment:

New changeset 3b9fb8ebf44f by Benjamin Peterson in branch '2.7':
fix build with older openssl (#25569)
https://hg.python.org/cpython/rev/3b9fb8ebf44f

New changeset f13a75544b6f by Benjamin Peterson in branch '3.4':
fix build with older openssl (#25569)
https://hg.python.org/cpython/rev/f13a75544b6f

New changeset 83ea7e75605a by Benjamin Peterson in branch '3.5':
merge 3.4 (#25569)
https://hg.python.org/cpython/rev/83ea7e75605a

New changeset 8ac09e46ca45 by Benjamin Peterson in branch 'default':
merge 3.5 (#25569)
https://hg.python.org/cpython/rev/8ac09e46ca45

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25624] shutil.make_archive makes invalid directory entries

2015-11-14 Thread Serhiy Storchaka

Serhiy Storchaka added the comment:

Do you want to provide a patch?

--
assignee:  -> serhiy.storchaka
keywords: +easy
stage:  -> needs patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25624] shutil.make_archive makes invalid directory entries

2015-11-14 Thread SilentGhost

SilentGhost added the comment:

Can you provide a test?

--
nosy: +SilentGhost, serhiy.storchaka, tarek
versions: +Python 3.6

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25624] shutil.make_archive makes invalid directory entries

2015-11-14 Thread Dingyuan Wang

Dingyuan Wang added the comment:

My patch for this.

--
keywords: +patch
Added file: http://bugs.python.org/file41039/storedirectory.patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25583] os.makedirs with exist_ok=True raises PermissionError on Windows 7^

2015-11-14 Thread Daniel Plachotich

Daniel Plachotich added the comment:

Looks good to me.
Without the fix, the test fails on Windows 7 as expected.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue24821] The optimization of string search can cause pessimization

2015-11-14 Thread STINNER Victor

STINNER Victor added the comment:

> The patch also makes a little refactoring. STRINGLIB(fastsearch_memchr_1char) 
> now is renamed and split on two functions STRINGLIB(find_char) and 
> STRINGLIB(rfind_char) with simpler interface.

Could you please push this part of the change? It looks good to me.

--

The C library provides a wmemchr() function which can be used to search for a 
wchar_t character inside a wchar_t* string.

* for 16-bit wchar_t (ex: Windows, AIX), it can be used for Python UCS2 strings
* for 32-bit wchar_t (ex: Linux, Mac OS X), it can be used for Python UCS4 
strings

I don't know if the type is signed or not. If the type is signed, we have to 
ensure that wmemchr() works as expected.

--

I didn't review carefully your new heuristic to search for a character.

Did you try to not use memchr() but a simple C loop for UCS-2 and UCS-4?

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue23883] __all__ lists are incomplete

2015-11-14 Thread Martin Panter

Martin Panter added the comment:

Thankyou for sticking with this Jacek. I have committed your three patches. I 
reworded the documentation a little bit, mainly so it says that it looks for 
“public” names, rather than documented names, because it does not look at 
documentation at all. I also added a note to the Changes in the Python API 
section of What’s New.

Next step I think is to finish off those patches for tarfile, calendar and 
fileinput.

--
stage: patch review -> needs patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25388] tokenizer crash/misbehavior -- heap use-after-free

2015-11-14 Thread Roundup Robot

Roundup Robot added the comment:

New changeset 73da4fd7542b by Serhiy Storchaka in branch '3.4':
Issue #25388: Fixed tokenizer crash when processing undecodable source code
https://hg.python.org/cpython/rev/73da4fd7542b

New changeset e4a69eb34ad7 by Serhiy Storchaka in branch '3.5':
Issue #25388: Fixed tokenizer crash when processing undecodable source code
https://hg.python.org/cpython/rev/e4a69eb34ad7

New changeset ea0c4b811eae by Serhiy Storchaka in branch 'default':
Issue #25388: Fixed tokenizer crash when processing undecodable source code
https://hg.python.org/cpython/rev/ea0c4b811eae

New changeset 8e472cc258ec by Serhiy Storchaka in branch '2.7':
Issue #25388: Fixed tokenizer hang when processing undecodable source code
https://hg.python.org/cpython/rev/8e472cc258ec

--
nosy: +python-dev

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25168] test_datetime.test_strptime() random failures on "s390x SLES" buildbots

2015-11-14 Thread Serhiy Storchaka

Serhiy Storchaka added the comment:

Thanks to Martin's research I have wrote a patch that resets a cache when 
timezone is changed. Martin's example in msg254643 works with this patch.

--
keywords: +patch
Added file: http://bugs.python.org/file41042/strptime_cache_timezone.patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue24821] The optimization of string search can cause pessimization

2015-11-14 Thread Roundup Robot

Roundup Robot added the comment:

New changeset 1412be96faf0 by Serhiy Storchaka in branch 'default':
Issue #24821: Refactor STRINGLIB(fastsearch_memchr_1char) and split it on
https://hg.python.org/cpython/rev/1412be96faf0

--
nosy: +python-dev

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25578] Memory leak in SSLSocket.getpeercert() with 0-length AIA extension

2015-11-14 Thread Alex Gaynor

Changes by Alex Gaynor :


--
nosy: +benjamin.peterson

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue24821] The optimization of string search can cause pessimization

2015-11-14 Thread Serhiy Storchaka

Serhiy Storchaka added the comment:

> Could you please push this part of the change? It looks good to me.

Done. The patch that make an optimization now looks much simpler.

> The C library provides a wmemchr() function which can be used to search for a 
> wchar_t character inside a wchar_t* string.

Yes, I know. But this is C99 function, hence we should add configure test for 
it, and I don't know if it exists on Windows. I did not test its performance.

> Did you try to not use memchr() but a simple C loop for UCS-2 and UCS-4?

A simple C loop is 25-50% slower. My patch tries to use memchr(), but if it 
founds false positive, runs a simple C loop for limited length. This makes a 
performance only insignificantly worse in the case of few false positives, but 
makes it much better in cases of often or grouped together false positives. The 
common case when there are no false positives is not affected.

MEMCHR_CUT_OFF is heuristic parameter. It is equal to the number of characters 
for which memchr()/memrchr() and a simple loop work the same time. On my 
machine it is 10-15 for UCS1 and 20-50 for UCS2 and UCS4 (depending on 
direction and character width).

--
Added file: http://bugs.python.org/file41040/find_char_false_positives.patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue23883] __all__ lists are incomplete

2015-11-14 Thread Roundup Robot

Roundup Robot added the comment:

New changeset f8fa7bc837a3 by Martin Panter in branch 'default':
Issue #23883: Add test.support.check__all__() and test gettext.__all__
https://hg.python.org/cpython/rev/f8fa7bc837a3

New changeset 78d67bdc1142 by Martin Panter in branch 'default':
Issue #23883: Add missing APIs to __all__; patch by Jacek Kołodziej
https://hg.python.org/cpython/rev/78d67bdc1142

New changeset 25a7ceed79d1 by Martin Panter in branch 'default':
Issue #23883: Add news listing modules with new exported APIs
https://hg.python.org/cpython/rev/25a7ceed79d1

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue23883] __all__ lists are incomplete

2015-11-14 Thread Jacek Kołodziej

Jacek Kołodziej added the comment:

Martin, yay! :) And thank you for the documentation correction.

Milap, Joel, Mauro, are you still interested in working on patches for 
calendar/tarfile/fileinput patches? I intend to finish them up if that's not 
the case.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25569] Memory leak in SSLSocket.getpeercert()

2015-11-14 Thread Alex Gaynor

Alex Gaynor added the comment:

fixed

--
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue3353] make built-in tokenizer available via Python C API

2015-11-14 Thread Berker Peksag

Changes by Berker Peksag :


--
nosy: +berker.peksag
versions: +Python 3.6 -Python 3.5

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25168] test_datetime.test_strptime() random failures on "s390x SLES" buildbots

2015-11-14 Thread Martin Panter

Martin Panter added the comment:

Info when the s390x SLES 3.x buildbot failed 
:

_TimeRE_cache['Z']='(?Pstd|utc|gmt|dst)'
TZ=None, or None via getenv()
_regex_cache={'%Y-%m-%d %H:%M:%S.%f': 
re.compile('(?P\\d\\d\\d\\d)-(?P1[0-2]|0[1-9]|[1-9])-(?P3[0-1]|[1-2]\\d|0[1-9]|[1-9]|
 
[1-9])\\s+(?P2[0-3]|[0-1]\\d|\\d):(?P[0-5]\\d|\\d):(?P6[0-1]|[0-5]\\d|\\d)\\.(?P[0-9]{1,6})',
 re.IGNORECASE), '%Z': re.compile('(?Pstd|utc|gmt|dst)', re.IGNORECASE), '%z 
%Z': re.compile('(?P[+-]\\d\\d[0-5]\\d)\\s+(?Pstd|utc|gmt|dst)', 
re.IGNORECASE), '%z': re.compile('(?P[+-]\\d\\d[0-5]\\d)', re.IGNORECASE)}

So it seems _TimeRE_cache has been initialized when time.tzname = ("STD", 
"DST"), and this agrees with the contents of _regex_cache. When the tests fail, 
there is no TZ environment variable set, but the test is trying to use the time 
zone “EST”, which apparently comes from time.tzname[0]. The question in my mind 
is why did tzname change from when _strptime was initialized to when the tests 
ran?

Keys in _regex_cache, showing what has been parsed since it was cleared:

'%Y-%m-%d %H:%M:%S.%f'
'%Z'
'%z %Z'
'%z'

test_strptime() is inherited by various classes. The first version passed, and 
the other five failed:

test_strptime (test.datetimetester.TestDateTime) ... ok
test_strptime (test.datetimetester.TestSubclassDateTime) ... FAIL
test_strptime (test.datetimetester.TestDateTimeTZ) ... FAIL
test_strptime (test.datetimetester.TestDateTime) ... FAIL
test_strptime (test.datetimetester.TestSubclassDateTime) ... FAIL
test_strptime (test.datetimetester.TestDateTimeTZ) ... FAIL

Inbetween the good and the first bad test_strptime() runs, there are the 
remaining TestDateTime tests, then the TestDateOnly, TestTZInfo, TestTimeZone, 
TestTimeTZ, TestDate, TestTimezoneConversions and TestTime classes, and finally 
the initial TestSubclassDateTime tests. Tests appear to be in alphabetical 
order by method name within each class, but the classes are in arbitrary order.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue2466] os.path.ismount doesn't work for mounts the user doesn't have permission to see

2015-11-14 Thread Robin Roth

Robin Roth added the comment:

Antoine's suggestion does not work, because "dirname" does not cover enough 
cases (for example trailing slash, possibly more).

As suggested by him I now use realpath (instead of abspath). I can't come up 
with a symlink-situation that is broken with the old code, but realpath is what 
"ismount" actually means.

I also added a testcase that resembles the issue, i.e. it fails with the old 
code and passes with the fix. 

I mock the "Permission denied" by raising a generic OSError. Mocking can not 
resemble every real-life situation but by simulating all issues reporting and 
then fixing them, one should get a solid test coverage. 

I also took the liberty of minor cleanup in/around the functions changed, i.e. 
remove unused imports and remove single-use variables to make the code easier 
to read.

Attached the updated patch.

--
Added file: 
http://bugs.python.org/file41041/test_fix_ismount_directory_not_readable.patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25168] test_datetime.test_strptime() random failures on "s390x SLES" buildbots

2015-11-14 Thread Serhiy Storchaka

Changes by Serhiy Storchaka :


--
nosy: +David.Edelsohn

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25627] distutils : file "bdist_rpm.py" allows Shell injection in "name"

2015-11-14 Thread SilentGhost

SilentGhost added the comment:

This also seem to affect python 3, there os.popen implemented using 
subprocess.Popen, but that one is called with shell=True. So basically the 
string that's passed to os.popen should be quoted. The attached patch seem to 
be sufficient when applied on the default branch.

--
keywords: +patch
nosy: +SilentGhost
Added file: http://bugs.python.org/file41044/issue25627.diff

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue23914] pickle fails with SystemError

2015-11-14 Thread Serhiy Storchaka

Serhiy Storchaka added the comment:

Here is a patch that makes broken OBJ opcode to raise UnpicklingError instead 
of SystemError, improves some UnpicklingError messages, and adds tests for 
unpickling broken data.

--
assignee:  -> serhiy.storchaka
keywords: +patch
stage:  -> patch review
Added file: http://bugs.python.org/file41045/unpickle_bad_stack.patch

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25578] Memory leak in SSLSocket.getpeercert() with 0-length AIA extension

2015-11-14 Thread Roundup Robot

Roundup Robot added the comment:

New changeset 79abea02a569 by Benjamin Peterson in branch '2.7':
fix possible memory lea k in _get_aia_uri (closes #25578)
https://hg.python.org/cpython/rev/79abea02a569

New changeset bddc5491d0fb by Benjamin Peterson in branch '3.4':
fix possible memory lea k in _get_aia_uri (closes #25578)
https://hg.python.org/cpython/rev/bddc5491d0fb

New changeset 6c77afae by Benjamin Peterson in branch '3.5':
merge 3.4 (#25578)
https://hg.python.org/cpython/rev/6c77afae

New changeset 858cb1538531 by Benjamin Peterson in branch 'default':
merge 3.5 (#25578)
https://hg.python.org/cpython/rev/858cb1538531

--
nosy: +python-dev
resolution:  -> fixed
stage:  -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25619] Exception AttributeError: "'NoneType'.... thrown on exit

2015-11-14 Thread R. David Murray

R. David Murray added the comment:

Yes, well, that is part of the fragility of python2's shutdown garbage 
collection, and one of the reasons it got improved.  Changing the name of a 
function can change the order things get retrieved from various internal 
dictionaries, because they are hash tables.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25627] distutils : file "bdist_rpm.py" allows Shell injection in "name

2015-11-14 Thread Bernd Dietzel

New submission from Bernd Dietzel:

https://bugs.launchpad.net/ubuntu/+source/python2.7/+bug/1514183

File :
/usr/lib/python2.7/distutils/command/bdist_rpm.py

Line 358 :
This line in the code uses the depreached os.popen command, should be replaced 
with subprocess.Popen() :

out = os.popen(q_cmd)

Exploit demo :

1) Download the setup.py script witch i attached
2) Create a test folder an put the setup.py script in this folder
3) cd to the test folder
4) python setup.py bdist_rpm
5) A xmessage window pops up as a proof of concept

--
components: Distutils
files: setup.py
messages: 254670
nosy: TheRegRunner, dstufft, eric.araujo
priority: normal
severity: normal
status: open
title: distutils : file "bdist_rpm.py" allows Shell injection in "name
type: security
versions: Python 2.7
Added file: http://bugs.python.org/file41043/setup.py

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25626] Gzip fails for file over 2**32 bytes

2015-11-14 Thread SilentGhost

Changes by SilentGhost :


--
components: +Library (Lib)
nosy: +nadeem.vawda, twouters
versions: +Python 3.6

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue25627] distutils : file "bdist_rpm.py" allows Shell injection in "name"

2015-11-14 Thread Bernd Dietzel

Changes by Bernd Dietzel :


--
title: distutils : file "bdist_rpm.py" allows Shell injection in "name -> 
distutils : file "bdist_rpm.py" allows Shell injection in "name"

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue8728] 2.7 regression in httplib.py: AttributeError: 'NoneType' object has no attribute 'makefile'

2015-11-14 Thread Serhiy Storchaka

Changes by Serhiy Storchaka :


--
status: open -> pending
type: crash -> behavior

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue15504] pickle/cPickle saves invalid/incomplete data

2015-11-14 Thread Serhiy Storchaka

Serhiy Storchaka added the comment:

Since issue13555 is fixed, I think this issue is fixed too.

--
nosy: +serhiy.storchaka
status: open -> pending
type: crash -> behavior

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com