Carl Friedrich Bolz-Tereick pushed to branch branch/py3.9 at PyPy / pypy


Commits:
313cc752 by Carl Friedrich Bolz-Tereick at 2022-09-21T14:32:23+02:00
(cfbolz, xoraxax): check the length of a to-be-unpacked list *before* we make
the list copy

- - - - -
880b1052 by Carl Friedrich Bolz-Tereick at 2022-09-21T14:53:50+02:00
(cfbolz, xoraxax): make sure that tracing from GUARD_ALWAYS_FAILS makes
progress, and doesn't start from an earlier bytecode by preventing guard 
resume
data sharing for it

- - - - -
e42be9b5 by Julian Berman at 2022-09-23T11:30:55+02:00
Pull in the http.server vulnerability fix from python/cpython#87389

Fixes an open redirection vulnerability for paths starting with `//`.

Closes: #3812

--HG--
branch : http_server_vuln_fix

- - - - -
744a9f02 by Julian Berman at 2022-09-23T12:51:40+02:00
Backport the httpserver security fix from #854 to PyPy2.7

--HG--
branch : http_server_vuln_fix-pypy2

- - - - -
8c12bfb0 by Carl Friedrich Bolz-Tereick at 2022-09-23T11:01:32+00:00
Merge branch 'branch/http_server_vuln_fix' into 'branch/py3.8'

Pull in the http.server vulnerability fix from python/cpython#87389

See merge request pypy/pypy!854

--HG--
branch : py3.8

- - - - -
637ae94d by Carl Friedrich Bolz-Tereick at 2022-09-23T11:05:08+00:00
Merge branch 'branch/http_server_vuln_fix-pypy2' into 
'branch/default'

Backport the httpserver security fix from #854 to PyPy2.7

See merge request pypy/pypy!855

- - - - -
f75361b0 by Carl Friedrich Bolz-Tereick at 2022-09-23T13:10:59+02:00
merge default

--HG--
branch : py3.8

- - - - -
fde2a2c9 by Carl Friedrich Bolz-Tereick at 2022-09-23T14:37:32+02:00
(julian, cfbolz): fix segfault if random bytes are unmarshaled: if the typecode
TYPE_SHORT_ASCII is used, it can contain non-ascii bytes and that should be
checked

--HG--
branch : py3.9

- - - - -
92b1930c by Carl Friedrich Bolz-Tereick at 2022-09-23T14:38:58+02:00
merge py3.8

--HG--
branch : py3.9

- - - - -


8 changed files:

- lib-python/3/http/server.py
- lib-python/3/test/test_httpservers.py
- pypy/module/marshal/test/test_marshal.py
- pypy/module/pypyjit/test_pypy_c/test_containers.py
- pypy/objspace/std/marshal_impl.py
- pypy/objspace/std/objspace.py
- rpython/jit/metainterp/optimizeopt/optimizer.py
- rpython/jit/metainterp/test/test_tracelimit.py


View it on Heptapod: 
https://foss.heptapod.net/pypy/pypy/-/compare/7bca364ef6442d1fce87aa755cc9874ff6f5139a...92b1930c2d965ca0cfd9db64e03594f0ace6a5c1

-- 
View it on Heptapod: 
https://foss.heptapod.net/pypy/pypy/-/compare/7bca364ef6442d1fce87aa755cc9874ff6f5139a...92b1930c2d965ca0cfd9db64e03594f0ace6a5c1
You're receiving this email because of your account on foss.heptapod.net.


_______________________________________________
pypy-commit mailing list -- pypy-commit@python.org
To unsubscribe send an email to pypy-commit-le...@python.org
https://mail.python.org/mailman3/lists/pypy-commit.python.org/
Member address: arch...@mail-archive.com

Reply via email to