[issue46114] OpenSSL 3.0 uses different version scheme

2022-03-22 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Case in point: https://buildbot.python.org/all/#/builders/355/builds/338 -- ___ Python tracker <https://bugs.python.org/issue46

[issue46114] OpenSSL 3.0 uses different version scheme

2022-03-18 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: 3.8 builds are still running on the buildbots so not fixing 3.8 will cause them to fail. -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue46

[issue46542] test_json and test_lib2to3 crash on s390x Fedora Clang 3.x buildbot

2022-01-27 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: The issue seems to be affecting also the PPC64LE Fedora Rawhide Clang 3.x and PPC64LE Fedora Stable Clang 3.x -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue46

[issue45067] Failed to build _curses on CentOS 7

2021-09-02 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: You should use -lpaneltw instead of -lpanelw. See also: https://bugs.python.org/issue41981 -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue45

[issue44285] Coverity scan: Modules/getpath.c. "calculate_open_pyenv" allocates memory that is stored into "env_file".

2021-06-02 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +25082 stage: -> patch review pull_request: https://github.com/python/cpython/pull/26486 ___ Python tracker <https://bugs.python.org/issu

[issue44285] Coverity scan: Modules/getpath.c. "calculate_open_pyenv" allocates memory that is stored into "env_file".

2021-06-02 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : This is an issue as it seems with coverity as it's an error case where the file was not actually opened. This warning can be silenced and the code be made more explicit by adding an assertion. Python-3.9.1/Modules/getpath.c:1264: alloc_arg

[issue44048] test_hashlib failure for "AMD64 RHEL8 FIPS Only Blake2 Builtin Hash" buildbot

2021-05-31 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +25065 stage: -> patch review pull_request: https://github.com/python/cpython/pull/26470 ___ Python tracker <https://bugs.python.org/issu

[issue44048] test_hashlib failure for "AMD64 RHEL8 FIPS Only Blake2 Builtin Hash" buildbot

2021-05-05 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : The buildbot started experiencing some failures. First after https://github.com/python/cpython/commit/ddbef71a2c166a5d5dd168e26493973053a953d6 this test started failing

[issue38820] Make Python compatible with OpenSSL 3.0.0

2021-04-07 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue38820> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue43164] test_nntplib.NetworkedNNTP_SSLTests fails on "AMD64 RHEL8 FIPS Only Blake2 Builtin Hash" buildbot

2021-04-07 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: The issue seems to be resolved and the buildbot is green. -- resolution: -> third party stage: -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue43179] Remove 31/32-bit s390 Linux support (s390-linux-gnu triplet)

2021-02-18 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: > You do not need to support every platform. Just allow your users to use them. This is kinda missing the point though. For example I've dealt a lot with the CPython codebase (and I'm also one of the Red Hat maintainers for RHEL and Fed

[issue43179] Remove 32-bit s390 Linux support (s390-linux-gnu triplet)

2021-02-16 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: > s390 is being built for SLE-12, for example, on the internal SUSE build > system and SLE-12 is still supported. So if a customer wants to use Python > 3.10 in a SLE-12 s390 environment, why keep them from doing so? Are you sure about that?

[issue43179] Remove 32-bit s390 Linux support (s390-linux-gnu triplet)

2021-02-15 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: And to dig a bit further with a semi-official answer. RHEL4 had standalone support for s390, while since RHEL5+ we've had only multilib support (64 bits kernel and possibility of s390 userspace packages). RHEL7 that is the oldest currently supported

[issue43179] Remove 32-bit s390 Linux support (s390-linux-gnu triplet)

2021-02-15 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: For RHEL7 which is the older OS that buildbots are still running, only the System Z architecture is supported. From the release notes [0]: Note that Red Hat Enterprise Linux 7 supports IBM zEnterprise 196 hardware or later; IBM System z10 mainframe

[issue43164] test_nntplib.NetworkedNNTP_SSLTests fails on "AMD64 RHEL8 FIPS Only Blake2 Builtin Hash" buildbot

2021-02-08 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : This is one of the unstable buildbots, running under FIPS mode. One of the tests is failing at the moment. == ERROR: setUpClass (test.test_nntplib.NetworkedNNTP_SSLTests

[issue41981] Errors building python 3.9.0 from source on Centos 7 with GCC 10

2020-10-09 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: The RHEL7 buildbots test on the default system compiler (GCC 4.8). The combination of RHEL7 + GCC10 + Python 3.9 could do very weird stuff, and I don't think it would easy to support. Generally the build environment of an OS is tied to the default

[issue41648] edelsohn-* buildbot worker failing with: No space left on device

2020-08-27 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Note: I found that all my Fedora and RHEL8 buildbots have issues with connecting to the master buildbot server. Not sure if a related package got updated and prompts the disconnects (as the RHEL7 ones are fine), or if it's relevant to the master

[issue41642] RHEL and fedora buildbots fail due to disk space error

2020-08-26 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: There were almost 10GB of remnant cc* files in /tmp from the compilers used, which I presume were also the temporary artifacts which remained there after the disconnects. Cleaned those up and rebooted the RHEL8 x86_64 buildbot

[issue41642] RHEL and fedora buildbots fail due to disk space error

2020-08-26 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: There is an issue which I discovered after I returned from holidays, basically the buildbot-worker keeps getting disconnected from master, so builds start and end abruptly, retaining some artifacts. The next second it tried again with the same

[issue41175] Static analysis issues reported by GCC 10

2020-06-30 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +20392 stage: -> patch review pull_request: https://github.com/python/cpython/pull/21240 ___ Python tracker <https://bugs.python.org/issu

[issue41175] Static analysis issues reported by GCC 10

2020-06-30 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: First issue in Objects/bytearrayobject.c [0]. warning: use of NULL ‘’ where non-null expected [CWE-690] [-Wanalyzer-null-argument] 277 | memcpy(result->ob_bytes, va.buf, va.len); [0] https://github.com/python/cpython/blob/master/Obje

[issue41175] Static analysis issues reported by GCC 10

2020-06-30 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : GCC added a static analysis tool recently [0]. Running it under for CPython code base produces some interesting results. Reproducer: ./configure --with-pydebug && CFLAGS='-fanalyzer' make Attaching the log. [0] https://developers.redhat.

[issue37630] Investigate replacing SHA3 code with OpenSSL

2020-06-19 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- pull_requests: +20160 pull_request: https://github.com/python/cpython/pull/20986 ___ Python tracker <https://bugs.python.org/issue37

[issue40637] Allow users to disable builtin hash modules on compile time

2020-06-17 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- pull_requests: +20131 pull_request: https://github.com/python/cpython/pull/20951 ___ Python tracker <https://bugs.python.org/issue40

[issue40637] Allow users to disable builtin hash modules on compile time

2020-06-17 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak nosy_count: 2.0 -> 3.0 pull_requests: +20116 pull_request: https://github.com/python/cpython/pull/20937 ___ Python tracker <https://bugs.python.org/issu

[issue40698] distutils.command.upload md5_digest

2020-05-20 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: There is also https://github.com/pypa/warehouse/pull/888 So I would assume it's safe it change the digest to sha256. -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue40

[issue40334] PEP 617: new PEG-based parser

2020-05-04 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: -cstratak ___ Python tracker <https://bugs.python.org/issue40334> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue40334] PEP 617: new PEG-based parser

2020-04-23 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: > Is this related to this issue? We didn't change that line I can provide you access to the buildbot if you'd like to debug the issue. -- nosy: +cstratak ___ Python tracker <https://bugs.pyth

[issue40018] test_ssl fails with OpenSSL 1.1.1e

2020-03-27 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: And there is already a meta-issue created by cheimes for 3.0.0: https://bugs.python.org/issue38820 -- ___ Python tracker <https://bugs.python.org/issue40

[issue40018] test_ssl fails with OpenSSL 1.1.1e

2020-03-27 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: The change has been reverted upstream. Also on the rawhide buildbots, we have an updated build with the commit reverted, so they returned back to green. Now the revertion will be included at a new release of the 1.1.1 branch, however it will still

[issue40018] test_ssl fails with OpenSSL 1.1.1e

2020-03-25 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: This behavior change is considered being reverted upstream. PR: https://github.com/openssl/openssl/pull/11400 -- ___ Python tracker <https://bugs.python.org/issue40

[issue40018] test_ssl fails with OpenSSL 1.1.1e

2020-03-23 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Still searching the issue and created a first draft PR. With it, tesT_ssl and test_imaplib pass now, urllib2_localnet still has issues. -- ___ Python tracker <https://bugs.python.org/issue40

[issue40018] test_ssl fails with OpenSSL 1.1.1e

2020-03-23 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +18491 stage: -> patch review pull_request: https://github.com/python/cpython/pull/19129 ___ Python tracker <https://bugs.python.org/issu

[issue40018] test_ssl fails with OpenSSL 1.1.1e

2020-03-22 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: The relevant info which seems to make the tests fail: Properly detect EOF while reading in libssl. Previously if we hit an EOF while reading in libssl then we would report an error back to the application (SSL_ERROR_SYSCALL) but errno would be 0. We

[issue40044] Tests failing with the latest update of openssl to version 1.1.1e

2020-03-22 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Closing it as duplicate of https://bugs.python.org/issue40018 -- resolution: -> duplicate stage: -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue40044] Tests failing with the latest update of openssl to version 1.1.1e

2020-03-22 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : The fedora rawhide buildbots started failing due to the latest update of openssl to version 1.1.1e. e.g. https://buildbot.python.org/all/#/builders/607/builds/137 Changelog: https://www.openssl.org/news/cl111.txt The relevant info which seems

[issue32521] NIS module fails to build due to the removal of interfaces related to Sun RPC from glibc.

2020-03-16 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Closing the issue as python2 is not receiving any more fixes and our downstream workaround is enough for it. Python3 is fine as well. -- status: open -> closed ___ Python tracker <https://bugs.pyth

[issue38913] Py_BuildValue("(s#O)", ...) segfaults if entered with exception raised

2020-03-02 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: After this change, the arm64 buildbots are reporting reference leaks: 1:03:24 load avg: 0.95 Re-running failed tests in verbose mode 1:03:24 load avg: 0.95 Re-running test_capi in verbose mode test_capi leaked [4, 4, 4] references, sum=12 e.g. https

[issue39689] test_struct failure on s390x Fedora Clang buildbot

2020-02-26 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: On this loop: for c in [b'\x01', b'\x7f', b'\xff', b'\x0f', b'\xf0']: self.assertTrue(struct.unpack('>?', c)[0]) It fails for the b'\xf0' case -- ___ Python tracker <https://bugs.python.org/issu

[issue39689] test_struct failure on s390x Fedora Clang buildbot

2020-02-19 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Failed assertion here: https://github.com/python/cpython/blob/master/Lib/test/test_struct.py#L520 -- ___ Python tracker <https://bugs.python.org/issue39

[issue39689] test_struct failure on s390x Fedora Clang buildbot

2020-02-19 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : The clang build was recently added for that buildbot and it seems on that particular architecture, test_struct fails with: == FAIL: test_bool (test.test_struct.StructTest

[issue39676] test_shutil fails with OSError: [Errno 28] No space left on device on "PPC64LE Fedora Stable LTO + PGO 3.x" buildbot

2020-02-19 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: The issue has been fixed. root was 15GB, but there was still 30GB of un-allocated space in the volume group, so just expanded the logical volume. -- ___ Python tracker <https://bugs.python.org/issue39

[issue37096] Add large-file tests for modules using sendfile(2)

2019-12-06 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Can we reopen the issue? Clearly this change modifies the expectations of free disk space for the temp files created by the tests. Or at least clarify that those tests require more than 6gb of free disk space in /tmp for unix

[issue38965] test_stack_overflow (test.test_faulthandler.FaultHandlerTests) is stuck with GCC10

2019-12-06 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Would it make sense to also backport this fix to the 3.6 release? People compiling 3.6 with gcc 10 will stumble upon that. -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue38

[issue38980] Compile libpython with -fno-semantic-interposition

2019-12-05 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: > Maybe it should only be default when using --with-optimizations I think it will add to the complexity of the --with-optimizations flag which already implies PGO and LTO. Maybe an opt-in flag would be better IMHO. -- nosy: +cstra

[issue38270] Tests: Avoid MD5 or check for MD5 availablity

2019-12-02 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- pull_requests: +16927 stage: resolved -> patch review pull_request: https://github.com/python/cpython/pull/17446 ___ Python tracker <https://bugs.python.org/issu

[issue38270] Tests: Avoid MD5 or check for MD5 availablity

2019-12-02 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue38270> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue38850] test_largefile fails on android

2019-11-19 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: I got the same failures on Fedora rawhide. See https://bugs.python.org/issue37096 -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue38

[issue37096] Add large-file tests for modules using sendfile(2)

2019-11-11 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Alright added some more disk space at the buildbots, however it seems that it is not related to that. The current Fedora rawhide buildbot has 19GB of free space and the test is still failing. I tested on the Fedora stable buildbot for which I reduced

[issue38576] CVE-2019-18348: CRLF injection via the host part of the url passed to urlopen()

2019-10-24 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue38576> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue34028] Python 3.7.0 wont compile with SSL Support 1.1.0 > alledged missing X509_VERIFY_PARAM_set1_host() support

2019-10-23 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Have you also tried $ yum install openssl-devel ? That should work without requiring to compile openssl from source, unless you want a later version, which isn't advisable to install system-wide, as it could break other things. -- nosy

[issue38510] build python with --enable-shared with static linked python against libpython*.a

2019-10-21 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue38510> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue38350] ./configure --with-pydebug should use -O0 rather than -Og

2019-10-02 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: It seems that it's still being worked on from gcc's side: https://gcc.gnu.org/bugzilla//show_bug.cgi?id=78685 -- ___ Python tracker <https://bugs.python.org/issue38

[issue38350] ./configure --with-pydebug should use -O0 rather than -Og

2019-10-02 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Correction, not fail, just a ton of warnings. The same is true for -D_FORTIFY_SOURCE=1 -- ___ Python tracker <https://bugs.python.org/issue38

[issue38350] ./configure --with-pydebug should use -O0 rather than -Og

2019-10-02 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Do note though that if the -D_FORTIFY_SOURCE=2 hardening flag is used, the compilation will fail with an optimization level less than -Og. Haven't tried yet with -D_FORTIFY_SOURCE=1 to see if it works with -O0. -- nosy: +cstratak

[issue37631] EXTRA_CFLAGS get overrided by CFLAGS_NODIST

2019-10-02 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Also this is due to an expected behaviour from gcc. From the documentation: "If you use multiple -O options, with or without level numbers, the last such option is the one that is effe

[issue37631] EXTRA_CFLAGS get overrided by CFLAGS_NODIST

2019-10-02 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Dug a bit further here. The issue is that CFLAGS_NODIST will always come after normal CFLAGS (which are subsets of PY_CFLAGS and PY_CFLAGS_NODIST) [0][1]. The EXTRA_CFLAGS variable is appended at the end of PY_CFLAGS [2], hence as reported here

[issue37096] Add large-file tests for modules using sendfile(2)

2019-10-01 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: It seems that the -uall argument is passed to regrtest invocation for the buildbot run [0] which invokes the largefile tests (including all the resource intensive tests). However when configure is run you can see: checking whether to enable large

[issue37096] Add large-file tests for modules using sendfile(2)

2019-10-01 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: After this change I get some disk space issues on the Fedora rawhide buildbot for the clang installed build only (and strangely enough not for the other jobs). There are currently around 9GB of free space there: https://buildbot.python.org/all

[issue38269] AMD64 Debian PGO 3.x, AMD64 Clang UBSan 2.7 buildbots: No space left on device

2019-09-25 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: It's already explained that the build directories are duplicated, however it could be more verbose indeed. When a config is being used alongside a config which inherits from the previous one, then buildbot aborts with an error as it tries to compile

[issue38269] AMD64 Debian PGO 3.x, AMD64 Clang UBSan 2.7 buildbots: No space left on device

2019-09-25 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Yep that was my change as some jobs couldn't be run on the same worker due to the configs using the same directory. -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue38

[issue38239] test_gdb fails on AMD64 Fedora Stable LTO 3.8 and AMD64 RHEL8 LTO 3.x: Unexpected gdb output

2019-09-24 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue38239> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue17258] multiprocessing.connection challenge implicitly uses MD5

2019-09-18 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- pull_requests: +15857 pull_request: https://github.com/python/cpython/pull/16264 ___ Python tracker <https://bugs.python.org/issue17

[issue38132] Simplify hashlib implementation

2019-09-12 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Yes that would be awesome! Indeed hashlib has been a bit of a pain to work with especially with FIPS related modifications, simplifying it would help a ton. -- nosy: +cstratak ___ Python tracker <ht

[issue38033] Use After Free: PyObject_Free (valgrind)

2019-09-06 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Another thing also, is to be sure to utilize the python's suppression file by adding the --suppressions= to valgrind's command line invocation. -- nosy: +cstratak ___ Python tracker <ht

[issue37631] EXTRA_CFLAGS get overrided by CFLAGS_NODIST

2019-07-30 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: I agree that documenting the flags is quite important, I've had a hard time trying to figure out how to implement the LDFLAGS_NODIST, and the change still broke macos builds (luckily it was fixed swiftly). Nevertheless, this is still a bug which

[issue37630] Investigate replacing SHA3 code with OpenSSL

2019-07-22 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue37630> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue9216] FIPS support for hashlib

2019-07-19 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Providing a simple keyword as a workaround for bypassing the FIPS restrictions, could potentially violate the standard, as there is no way from the python side to verify if the code in question is used for security purposes or not. Thus I would close

[issue37631] EXTRA_CFLAGS get overrided by CFLAGS_NODIST

2019-07-19 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Could you provide more info, e.g. comparison between the proper and the erroneous output, as well as what it affects (test_gdb if I recall correctly)? -- nosy: +cstratak ___ Python tracker <ht

[issue37382] Improve conditional check for test_gdb

2019-06-26 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: There is a fleet of buildbots with a variety og versions of gcc and gdb, so if a change like that is pushed, all the fleet has to be monitored for potential failures, as there are many older OSes supported there. -- nosy: +cstratak

[issue36742] CVE-2019-10160: urlsplit NFKD normalization vulnerability in user:password@

2019-06-10 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue36742> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue37081] Test with OpenSSL 1.1.1c

2019-05-28 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Also those failures are recorded on the Fedora buildbot, it seems to be happening randomly: https://buildbot.python.org/all/#/workers/32 -- ___ Python tracker <https://bugs.python.org/issue37

[issue37081] Test with OpenSSL 1.1.1c

2019-05-28 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Reported here: https://bugs.python.org/issue35998 -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue37

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-05-08 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: A small clarification on the differences of those two CVE's. CVE-2019-9740: CLRF sequences are not properly handled in python built-in modules urllib/urllib2 in the query part of the url parameter of urlopen() function CVE-2019-9947: CLRF sequences

[issue35907] Unnecessary URL scheme exists to allow file:// reading file in urllib

2019-04-29 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue35907> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36659] distutils UnixCCompiler: Remove standard library path from rpath

2019-04-23 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue36659> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36276] Python urllib CRLF injection vulnerability

2019-03-26 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue36276> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36367] tokenizer.c memory leak in case of realloc failure

2019-03-19 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : In tokenizer.c we have those lines of code [0]: if (final_length < needed_length && final_length) /* should never fail */ buf = PyMem_REALLOC(buf, final_length); return buf; If however that realloc fails, the memory allocate

[issue35998] test_asyncio: test_start_tls_server_1() TimeoutError on Fedora 29

2019-03-19 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: On my system with openssl 1.1.1b, by reducing the PAYLOAD_SIZE the test passes successfully. It starts failing when it's bigger than 1024 * 95 -- ___ Python tracker <https://bugs.python.org/issue35

[issue18368] PyOS_StdioReadline() leaks memory when realloc() fails

2019-03-14 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- pull_requests: +12305 ___ Python tracker <https://bugs.python.org/issue18368> ___ ___ Python-bugs-list mailing list Unsub

[issue36292] Coverity scan: Resource leaks in longobject.c

2019-03-14 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: This code is unreachable. Will mark it as such. -- ___ Python tracker <https://bugs.python.org/issue36292> ___ ___ Pytho

[issue36292] Coverity scan: Resource leaks in longobject.c

2019-03-14 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- versions: -Python 2.7, Python 3.7 ___ Python tracker <https://bugs.python.org/issue36292> ___ ___ Python-bugs-list mailin

[issue36292] Coverity scan: Resource leaks in longobject.c

2019-03-14 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +12304 stage: -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36292] Coverity scan: Resource leaks in longobject.c

2019-03-14 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : The coverity scan was run on python2, however the same defect seems to exist in python3 as well. Error: RESOURCE_LEAK (CWE-772): [#def69] Python-2.7.15/Objects/longobject.c:3793: alloc_fn: Storage is returned from allocation function "_PyLon

[issue36291] [2.7] Coverity Scan: Modules/_json.c: leaked_storage: Variable "numstr" going out of scope leaks the storage it points to.

2019-03-14 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +12301 stage: -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36291] [2.7] Coverity Scan: Modules/_json.c: leaked_storage: Variable "numstr" going out of scope leaks the storage it points to.

2019-03-14 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : Coverity reports a leak within the json module: Error: RESOURCE_LEAK (CWE-772): [#def26] Python-2.7.15/Modules/_json.c:1367: alloc_fn: Storage is returned from allocation function "PyString_FromStringAndSize". Python-2.7.15/Objects/stringo

[issue36289] [2.7] Coverity scan: Modules/_io/bufferedio.c leaked_storage: Variable "data" going out of scope leaks the storage it points to.

2019-03-14 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +12300 stage: -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36289] [2.7] Coverity scan: Modules/_io/bufferedio.c leaked_storage: Variable "data" going out of scope leaks the storage it points to.

2019-03-14 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : Coverity scan reports this for bufferedio.c : Error: RESOURCE_LEAK (CWE-772): [#def23] Python-2.7.15/Modules/_io/bufferedio.c:1353: alloc_fn: Storage is returned from allocation function "PyString_FromStringAndSize". Python-2.7.

[issue36212] [2.7] Coverity scan: Modules/_hotshot.c , Variable "s1" going out of scope leaks the storage it points to.

2019-03-14 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +12298 stage: -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36262] Coverity scan: Python/dtoa.c resource leak

2019-03-11 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +mark.dickinson, vstinner ___ Python tracker <https://bugs.python.org/issue36262> ___ ___ Python-bugs-list mailin

[issue36262] Coverity scan: Python/dtoa.c resource leak

2019-03-11 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : Coverity report on dtoa.c. It was run on python2 but the same code resides on python3. Error: RESOURCE_LEAK (CWE-772): [#def89] Python-2.7.15/Python/dtoa.c:1846: alloc_fn: Storage is returned from allocation function "s2b". Python-2.7

[issue36212] [2.7] Coverity scan: Modules/_hotshot.c , Variable "s1" going out of scope leaks the storage it points to.

2019-03-06 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : Coverity scan reports a leak on _hotshot.c: Python-2.7.15/Modules/_hotshot.c:442: alloc_arg: "unpack_string" allocates memory that is stored into "s1". Python-2.7.15/Modules/_hotshot.c:329:5: alloc_fn: Storage is returned from

[issue36186] [2.7] Coverity scan: Modules/linuxaudiodev.c , fd handle is not closed.

2019-03-04 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +12161 stage: -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36186] [2.7] Coverity scan: Modules/linuxaudiodev.c , fd handle is not closed.

2019-03-04 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : There are two places [0][1] in the code where NULL is returned but the fd handle is not closed. [0] https://github.com/python/cpython/blob/2.7/Modules/linuxaudiodev.c#L129 [1] https://github.com/python/cpython/blob/2.7/Modules/linuxaudiodev.c#L133

[issue36147] [2.7] Coverity scan: Modules/_ctypes/cfield.c , Variable "result" going out of scope

2019-02-28 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- keywords: +patch pull_requests: +12108 stage: -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36147] [2.7] Coverity scan: Modules/_ctypes/cfield.c , Variable "result" going out of scope

2019-02-28 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: Also the change from PyUnicode_FromStringAndSize to PyBytes_FromStringAndSize happened here: https://bugs.python.org/issue8966 -- ___ Python tracker <https://bugs.python.org/issue36

[issue36147] [2.7] Coverity scan: Modules/_ctypes/cfield.c , Variable "result" going out of scope

2019-02-28 Thread Charalampos Stratakis
New submission from Charalampos Stratakis : Coverity scan on python2 resulted in this error. Python-2.7.15/Modules/_ctypes/cfield.c:1297: alloc_fn: Storage is returned from allocation function "PyString_FromString". Python-2.7.15/Objects/stringobject.c:143:5: alloc_fn: Storage i

[issue13096] ctypes: segfault with large POINTER type names

2019-02-28 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- nosy: +vstinner ___ Python tracker <https://bugs.python.org/issue13096> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue13096] ctypes: segfault with large POINTER type names

2019-02-28 Thread Charalampos Stratakis
Charalampos Stratakis added the comment: It seems the python2 backport was incomplete as a PyMem_Free is missing, making buf leak. -- nosy: +cstratak ___ Python tracker <https://bugs.python.org/issue13

[issue13096] ctypes: segfault with large POINTER type names

2019-02-28 Thread Charalampos Stratakis
Change by Charalampos Stratakis : -- pull_requests: +12107 ___ Python tracker <https://bugs.python.org/issue13096> ___ ___ Python-bugs-list mailing list Unsub

  1   2   3   >