[issue37892] IDLE Shell: isolate user code input

[Terry J. Reedy]

Terry J. Reedy  added the comment:

PR 25678 merged on top of the sidebar patch results in using space indents with 
the sidebar.  An additional patch is needed to have the mode with '>>>' on a 
line by itself instead of having a sidebar.

The shell prompt_last_line attribute is now obsolete (it is always '') and 
should be removed after uses, such as "if self.prompt_last_line" headers and 
the following code, are removed.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue40943] PEP 353: Drop support for PyArg_ParseTuple() "#" formats when PY_SSIZE_T_CLEAN is not defined

[Inada Naoki]

Change by Inada Naoki :


--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue40943] PEP 353: Drop support for PyArg_ParseTuple() "#" formats when PY_SSIZE_T_CLEAN is not defined

[miss-islington]

miss-islington  added the comment:


New changeset 569ca81adf0be92be8752f6cc6492117f9ef3c0b by Miss Islington (bot) 
in branch '3.10':
bpo-40943: Fix skipitem() didn't raise SystemError (GH-25937)
https://github.com/python/cpython/commit/569ca81adf0be92be8752f6cc6492117f9ef3c0b


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44064] Python39/lib/logging/__init__.py SyntaxError: cannot delete starred

[Kathleen West]

Kathleen West  added the comment:

Created an issue @ microsoft/vscode-python

https://github.com/microsoft/vscode-python/issues/16174

--
stage:  -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue40943] PEP 353: Drop support for PyArg_ParseTuple() "#" formats when PY_SSIZE_T_CLEAN is not defined

[miss-islington]

Change by miss-islington :


--
nosy: +miss-islington
nosy_count: 3.0 -> 4.0
pull_requests: +24620
pull_request: https://github.com/python/cpython/pull/25961

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44064] Python39/lib/logging/__init__.py SyntaxError: cannot delete starred

[Kathleen West]

Kathleen West  added the comment:

We have a root cause/answer to the issue for future reference.

Jedi is a static analysis tool for Python that is typically used in 
IDEs/editors plugins (VS Code)

I will create a bug here:

https://github.com/Microsoft/vscode-python

--
resolution:  -> third party

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

ANN: PyScripter 4.0.0 released

[Kiriakos Vlahos]

PyScripter is a free and open-source Python Integrated Development Environment 
(IDE) created with the ambition to become competitive in functionality with 
commercial Windows-based IDEs available for other languages. It is 
feature-rich, but also light-weight.

New features:
- Major redesign of the User Interface - Material icons and new logo
- Re-architecture the interaction with python, code-completion etc. It should 
result in a more responsive user experience without delays and freezes.
- Added support for Python 3.10
- Removed support for Python 2.7, 3.2
- Installer and executable are now code-signed
- Persian translation added
- New IDE option "Restore open project"
- New File Explorer command "Select Directory..." (#1034)
Issues Addressed:
- #824, #990 #1031 #1035 #1038 #1039 #1040 #1105 #1109 #

See:
Announcement: https://pyscripter.blogspot.com/
Project home: https://github.com/pyscripter/pyscripter/
Features: https://github.com/pyscripter/pyscripter/wiki/Features
Downloads: https://sourceforge.net/projects/pyscripter/files
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le...@python.org
https://mail.python.org/mailman3/lists/python-announce-list.python.org/
Member address: arch...@mail-archive.com

[issue44064] Python39/lib/logging/__init__.py SyntaxError: cannot delete starred

[Jelle Zijlstra]

Jelle Zijlstra  added the comment:

"del t, v, tb" is perfectly legal Python syntax. It's whatever tool is showing 
a syntax error there (jedi, apparently) that's buggy.

% python3.9
Python 3.9.4 (default, Apr  9 2021, 09:47:14) 
[Clang 12.0.0 (clang-1200.0.32.29)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>> a = b = c = 1
>>> del a, b, c
>>>

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue40297] test_socket.CANTest is broken at HEAD on master

[Zachary Ware]

Change by Zachary Ware :


--
pull_requests: +24619
pull_request: https://github.com/python/cpython/pull/25960

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue40297] test_socket.CANTest is broken at HEAD on master

[Zachary Ware]

Change by Zachary Ware :


--
versions: +Python 3.7, Python 3.8

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue35633] test_eintr fails on AIX since fcntl functions were modified

[Kevin]

Kevin  added the comment:

FYI, the problem here is that AIX fcntl returns EACCES in the case that the 
lock is held and non-blocking behavior was requested:


> The lockfx and lockf subroutines fail if one of the following is true:
Item
> 
> EACCESThe Command parameter is F_SETLK, the l_type field is F_RDLCK, 
> and the segment of the file to be locked is already write-locked by another 
> process.
> EACCESThe Command parameter is F_SETLK, the l_type field is F_WRLCK, 
> and the segment of a file to be locked is already read-locked or write-locked 
> by another process.

https://www.ibm.com/docs/en/aix/7.1?topic=l-lockfx-lockf-flock-lockf64-subroutine

(Note the docs are a bit wonky referring to lockf/lockfx but talking about 
parameters and fields which apply to fcntl instead)

The lockf/flock APIs provided by AIX handle this appropriately, mapping EACCES 
to EWOULDBLOCK, but while Python calls the libbsd flock API, it uses its own 
lockf implementation which calls fcntl directly: 
https://github.com/python/cpython/blob/main/Modules/fcntlmodule.c#L426

--
nosy: +kadler

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44064] Python39/lib/logging/__init__.py SyntaxError: cannot delete starred

[Kathleen West]

Kathleen West  added the comment:

I literally changed the base logging code to this and it worked

finally:
del t
del v
del tb

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44064] Python39/lib/logging/__init__.py SyntaxError: cannot delete starred

[Kathleen West]

Kathleen West  added the comment:

The "del" statement
***

   del_stmt ::= "del" target_list

Deletion is recursively defined very similar to the way assignment is
defined. Rather than spelling it out in full details, here are some
hints.

Deletion of a target list recursively deletes each target, from left
to right.

Deletion of a name removes the binding of that name from the local or
global namespace, depending on whether the name occurs in a "global"
statement in the same code block.  If the name is unbound, a
"NameError" exception will be raised.

Deletion of attribute references, subscriptions and slicings is passed
to the primary object involved; deletion of a slicing is in general
equivalent to assignment of an empty slice of the right type (but even
this is determined by the sliced object).

Changed in version 3.2: Previously it was illegal to delete a name
from the local namespace if it occurs as a free variable in a nested
block.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44064] Python39/lib/logging/__init__.py SyntaxError: cannot delete starred

[Kathleen West]

Kathleen West  added the comment:

Jelle Zijlstra (Jelle Zijlstra)

"Saying it so doesn't make it so"

See the photo for proof. If you could reply with more details and clear steps 
on how to resolve the issue, that would be appreciated.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44064] Python39/lib/logging/__init__.py SyntaxError: cannot delete starred

[Jelle Zijlstra]

Jelle Zijlstra  added the comment:

Line 1030 of 3.9.4 is at 
https://github.com/python/cpython/blob/1f2e3088f3c097b5bde69bbd63dfcd0852d31984/Lib/logging/__init__.py#L1030
 and doesn't have a del statement or a syntax error. Most likely there's some 
mismatch where you're running the wrong version of Python.

--
nosy: +Jelle Zijlstra

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44064] Python39/lib/logging/__init__.py SyntaxError: cannot delete starred

[Kathleen West]

New submission from Kathleen West :

There is a syntax error in the python library 
"Python39/lib/logging/__init__.py" that when I run this is VS Code in debug 
mode, this shows up all the time.  

python --version
Python 3.9.4

Python39/lib/logging/__init__.py

{
"resource": 
"/C:/Users/kathl/AppData/Local/Programs/Python/Python39/lib/logging/__init__.py",
"owner": "_generated_diagnostic_collection_name_#0",
"severity": 8,
"message": "SyntaxError: cannot delete starred",
"source": "jedi",
"startLineNumber": 1030,
"startColumn": 17,
"endLineNumber": 1030,
"endColumn": 29
}

--
components: Library (Lib)
files: PythonError.jpg
messages: 393156
nosy: kathleenwest
priority: normal
severity: normal
status: open
title: Python39/lib/logging/__init__.py SyntaxError: cannot delete starred
type: compile error
versions: Python 3.9
Added file: https://bugs.python.org/file50021/PythonError.jpg

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Proposal: Disconnect comp.lang.python from python-list

[Greg Ewing]

My opinion on all this: The volume in this newsgroup is nowhere
near high enough to be worth changing anything.

This thread itself now contains more messages than the recent
neopython trollage that prompted it.

--
Greg

--
https://mail.python.org/mailman/listinfo/python-list

Re: Bloody rubbish

[MRAB]

On 2021-05-06 21:35, Gene Heskett wrote:

On Thursday 06 May 2021 13:54:23 Skip Montanaro wrote:


> Machine language is so much simpler, and you can code with just a
> hexpad.

Pshaa... All you need are front panel switches. ;-) (Yes, I had a
professor who required is to 'key' in our programs on the front panel,
of a rack mounted PDP-11 as I recall. Needless to say, we didn't use
an assembler either. We just wrote raw opcodes and their arguments on
paper. This was in the late 70s.)


[snip]

Sounded like a good idea, so I ordered a quest super elf board which only
had a hex keypad and hex monitor, along with a copy of RCA's programming
the 1802.  This was in 1978 IIRC. That grew an s-100 backplane and a
$400 4k of static ram kit.  And I built the rest of the interfaceing
including the video  to lay a new, digital academy leader countdown out
of whole cloth.


4K? Luxury!

My first machine was a Mk14 from Science of Cambridge. I had the extra 
RAM and the I/O chip, giving a total of 768 bytes (256 + 256 + 128, 
non-contiguous, of course). And one of the bits in the second block was 
faulty.

--
https://mail.python.org/mailman/listinfo/python-list

[issue43176] Dataclasses derived from empty frozen bases skip immutability checks

[Eric V. Smith]

Change by Eric V. Smith :


--
keywords: +3.8regression, 3.9regression -patch
resolution: fixed -> 
stage: resolved -> needs patch
status: closed -> open

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44059] Support SerenityOS Browser in webbrowser module

[Gregory P. Smith]

Gregory P. Smith  added the comment:

thanks for the PR!

--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Steve Dower]

Steve Dower  added the comment:

> I can reproduce it on latest master running on Linux.

Interesting. Perhaps my actual change was to cause it to raise an error 
earlier (outside of a handler)? Which would mean that the Path object 
was always failing before, just silently.

Arguably we should filter them out instead, then, rather than 
introducing a new supported type (as has been argued with similar 
changes elsewhere) in a security branch. Though I'm sure the OP would 
have noticed if their call was never returning any modules, so 
presumably it must have worked somehow.

> I'm happy to open an PR, just let me know or if OP is not willing to do so 
> either.

Feel free. I assume they'd have arrived with a PR if they were keen to 
write it themselves.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue11466] getpass.getpass doesn't close tty file

[Senthil Kumaran]

Senthil Kumaran  added the comment:

This was fixed in 
https://github.com/python/cpython/commit/16dbbae2981c96c7c9b1ae81e1708d54b08c10ac

Since Python 3.4

And tests do not raise any ResourceWarning now.

```
$ ../../python -Vs
Python 3.11.0a0
$ ../../python -m unittest test_getpass.py -v
test_username_falls_back_to_pwd (test_getpass.GetpassGetuserTest) ... ok
test_username_priorities_of_env_values (test_getpass.GetpassGetuserTest) ... ok
test_username_takes_username_from_env (test_getpass.GetpassGetuserTest) ... ok
test_flushes_stream_after_prompt (test_getpass.GetpassRawinputTest) ... ok
test_raises_on_empty_input (test_getpass.GetpassRawinputTest) ... ok
test_trims_trailing_newline (test_getpass.GetpassRawinputTest) ... ok
test_uses_stderr_as_default (test_getpass.GetpassRawinputTest) ... ok
test_uses_stdin_as_default_input (test_getpass.GetpassRawinputTest) ... ok
test_uses_stdin_as_different_locale (test_getpass.GetpassRawinputTest) ... ok
test_falls_back_to_fallback_if_termios_raises (test_getpass.UnixGetpassTest) 
... ok
test_falls_back_to_stdin (test_getpass.UnixGetpassTest) ... ok
test_flushes_stream_after_input (test_getpass.UnixGetpassTest) ... ok
test_resets_termios (test_getpass.UnixGetpassTest) ... ok
test_uses_tty_directly (test_getpass.UnixGetpassTest) ... ok

--
Ran 14 tests in 0.041s

OK

```

--
resolution:  -> fixed
stage:  -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43176] Dataclasses derived from empty frozen bases skip immutability checks

[Eric V. Smith]

Eric V. Smith  added the comment:

Hmm. I think maybe the intent was that if you're frozen, treat all the fields 
as frozen, including ones you inherit, regardless if the base classes are 
frozen or not.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43176] Dataclasses derived from empty frozen bases skip immutability checks

[Ulrich Petri]

Ulrich Petri  added the comment:

@eric.smith Sure, here you go:


dataclass_empty.py:
```
from dataclasses import dataclass


@dataclass
class A:
pass


@dataclass(frozen=True)
class B(A):
x: int

print("42")
```

Running this on < 3.8.10:
```
$ ~/.pythonz/pythons/CPython-3.8.1/bin/python3.8 --version
Python 3.8.1

$ ~/.pythonz/pythons/CPython-3.8.1/bin/python3.8 dataclass_empty.py
42
```

And on 3.8.10:
```
$ /usr/local/opt/python@3.8/bin/python3 --version
Python 3.8.10

$ /usr/local/opt/python@3.8/bin/python3 dataclass_empty.py
Traceback (most recent call last):
  File "dataclass_empty.py", line 10, in 
class B(A):
  File 
"/usr/local/Cellar/python@3.8/3.8.10/Frameworks/Python.framework/Versions/3.8/lib/python3.8/dataclasses.py",
 line 1011, in wrap
return _process_class(cls, init, repr, eq, order, unsafe_hash, frozen)
  File 
"/usr/local/Cellar/python@3.8/3.8.10/Frameworks/Python.framework/Versions/3.8/lib/python3.8/dataclasses.py",
 line 896, in _process_class
raise TypeError('cannot inherit frozen dataclass from a '
TypeError: cannot inherit frozen dataclass from a non-frozen one
```

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Proposal: Disconnect comp.lang.python from python-list

[Ethan Furman]

On 5/6/21 11:05 AM, Jon Ribbens via Python-list wrote:
> On 2021-05-06, Stestagg wrote:

>> Where's this discussion going?
>>
>> Which of the practically possible options are best for this list <->
>> newsgroup setup?
>
> And it appears even the suggestion that
> Mailman 3 cannot be used while a gateway is involved is untrue:
> https://mailman.readthedocs.io/en/latest/src/mailman/handlers/docs/nntp.html

Interesting.  I know the NNTP gateway wasn't there a couple years ago, and I do not see a date as to when that became 
possible.


--
~Ethan~
--
https://mail.python.org/mailman/listinfo/python-list

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Gregory P. Smith]

Gregory P. Smith  added the comment:

FWIW, if we were to add a parameter, I'd lean towards a name of 
"invalid_url_characters = None" defaulting to using what's in our private 
_UNSAFE_URL_BYTES_TO_REMOVE global when None but otherwise letting the user 
specify a sequence of characters.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue40297] test_socket.CANTest is broken at HEAD on master

[miss-islington]

Change by miss-islington :


--
pull_requests: +24618
pull_request: https://github.com/python/cpython/pull/25957

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Gregory P. Smith]

Gregory P. Smith  added the comment:

Of note: If we had chosen to raise a ValueError (or similar) for these 
characters by default, the cloud-init code would also fail to behave as 
intended today (based on what I see in 
https://github.com/canonical/cloud-init/commit/c478d0bff412c67280dfe8f08568de733f9425a1)

Recommendation for cloud-init - Do your hostname transformation early using as 
simple as possible logic.  By virtue of accepting (and encouraging?) invalid 
characters and transforming them, what you have today that you call urlsplit on 
is more of a url template, not really a url.  something like this:

```
if m := 
re.search(r'^(?P[^/:]+://|)(?P[^/]+)(?P/.*)',
 url_template):
start, hostname, end = m.groups()
for transformation in transformations:
... fixup hostname ...
url = f'{start}{hostname}{end}'
else:
... # doesn't look like a URL template
```

yes this simplicity would allow your transformations to apply to the :port 
number.  you could simplify further by including the scheme_colon_slashes in 
the part transformed.  as your values are coming from user written config 
files, do you need to care about invalid characters in those transforming into 
invalid in the scheme or port number - characters in the resulting url anyways?

after that, do you even need urlsplit at all in your 
`_apply_hostname_transformations_to_url()` function?

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue26680] Incorporating float.is_integer into Decimal

[Raymond Hettinger]

Raymond Hettinger  added the comment:

This has gone stale and I've been unable to contact the OP.  Marking as closed 
for now.  Please reopen if this comes back to life again and I'll review the PR.

--
resolution:  -> remind
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Bloody rubbish

[Abdur-Rahmaan Janhangeer]

@Gene Heskett  That ran deep. I was going
to ask you were doing in PythonLand but you
answered it at the end. Maybe i should ask what
made you interested in Python in the first place?
-- 
https://mail.python.org/mailman/listinfo/python-list

Re: Proposal: Disconnect comp.lang.python from python-list

[Grant Edwards]

On 2021-05-06, Chris Green  wrote:
> Grant Edwards  wrote:
>> On 2021-05-06, Chris Green  wrote:
>> > Grant Edwards  wrote:
>> >
>> >> Pointing a newsreader at news.gmane.io allows one to participate in
>> >> the mailing list just fine without using Usenet.
>> >> 
>> > ???  Surely that *is* using Usenet, at least you're using NNTP which
>> > is the Usenet protocol.  What's "not Usenet" about it?
>> 
>> Usenet was a distributed network of computers that transferred
>> articles amongst themselves using various protocols, and provided
>> access to readers in various ways (NNTP being one of them).
>> 
> Usenet *is* still this

Good point.

>> Gmane was not and is not part of that network. It is a single,
>> stand-alone machine operating as an email list archiver/gateway that
>> provides access to read/post via NTTP.
>
> It is effectively part of Usenet because the mailing lists it hosts
> and gateways to its newserver are peered with Usenet.  

I don't consider that as "being part of Usenet". Being part of Usenet
means that you peer with other the news hosts within Usenet, provide
the same group hiearchary (or some defined subset) and obey the normal
newsgroup control messages.

> I read several gmane 'lists' via usenet, I most certainly don't get
> them directly from gmane, I get them from other usenet servers.

Are you saying that the gmane news server is peered with other news
servers? And that you can read gmane.comp.python.general on other news
servers?  That didn't used to be the case...


-- 
https://mail.python.org/mailman/listinfo/python-list

Re: Bloody rubbish

[Grant Edwards]

On 2021-05-06, Michael Torrie  wrote:
> On 5/5/21 8:58 PM, Joe Pfeiffer wrote:
>> Mr Flibble  writes:
>> 
>>> Python is slow and significant whitespace is patently absurd.
>> 
>> Why am I not surprised to learn your "fast" implementation turns out to
>> be something other than python?
>
> And it's bizarre that the OP, since he despises Python so much, and
> finds its syntax absurd, would even bother to make any sort of
> implementation of it.

It would be bizarre, except he's trolling -- so it's just boring and
predictable.


-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Miguel Brito]

Miguel Brito  added the comment:

I can reproduce it on latest master running on Linux.

steve.dower: I wrote some tests and wrapping get_importer argument with 
os.fsdecode() fixes it.

I'm happy to open an PR, just let me know or if OP is not willing to do so 
either.

--
nosy: +miguendes

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Mike Lissner]

Mike Lissner  added the comment:

>  With the fix for this bug, urlsplit silently removes (some of) those 
> characters before we can replace them, modifying the output of our 
> sanitisation code

I don't have any good solutions for 3.9.5, but going forward, this feels like 
another example of why we should just do parsing right (the way browsers do). 
That'd maintain tabs and whatnot in your output, and it'd fix the security 
issue by putting `java\nscript` into the scheme attribute instead of the path.

> One solution that presents itself to me: add a `strip_insecure_characters: 
> bool = True` parameter.

Doesn't this lose sight of what this tool is supposed to do? It's not supposed 
to have a good (new, correct) and a bad (old, obsolete) way of parsing. Woe 
unto whoever has to write the documentation for that parameter. 

Also, I should reiterate that these aren't "insecure" characters so if we did 
have a parameter for this, it'd be more like `do_rfc_3986_parsing` or maybe 
`do_naive_parsing`. The chars aren't insecure in themselves. They're fine. 
Python just gets tripped up on them.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Bloody rubbish

[Gene Heskett]

On Thursday 06 May 2021 13:54:23 Skip Montanaro wrote:

> > Machine language is so much simpler, and you can code with just a
> > hexpad.
>
> Pshaa... All you need are front panel switches. ;-) (Yes, I had a
> professor who required is to 'key' in our programs on the front panel,
> of a rack mounted PDP-11 as I recall. Needless to say, we didn't use
> an assembler either. We just wrote raw opcodes and their arguments on
> paper. This was in the late 70s.)
>
> Skip

That brings back memories. I was the ACE at KRCR in Redding CA, and I saw 
a huge quality destroying bottleneck in producing our own commercials 
and proposed to the GM that I wanted to learn something about computers, 
and I thought it would be a way around it, by having it installi the cue 
tones that made an autmatic station break sequencer work, as opposed to 
copying a blank tape from a poor master, then dub copying the finished 
commercial to the bad copy.

Sounded like a good idea, so I ordered a quest super elf board which only 
had a hex keypad and hex monitor, along with a copy of RCA's programming 
the 1802.  This was in 1978 IIRC. That grew an s-100 backplane and a 
$400 4k of static ram kit.  And I built the rest of the interfaceing 
including the video  to lay a new, digital academy leader countdown out 
of whole cloth.

Then I eventually went down the road in search of taller grass. I left 
instructions as to how to patch it for for the ballistics of newer tape 
machines and forgot about it, eventually landing for good in WV as the 
CE at a CBS affiliate in '84.  In '94, I took my then fairly new wife 
who has now passed on from COPD, to meet an aunt of mine, in her 80's as 
I figured I was running out of time to do that, so we booked a flight to 
Portland and she would meet us there and take us to her place in Salem. 
While there, I called that tv station and found out they were still 
using my gismo. 16+ years in a tv stations control room is unheard of 
but they said it was working fine and was one heck of a labor saver.  
With memory of only 4k, I used a lot of self-modifying code, but was 
very carefull to re-init it at the top of the loop. It didn't crash, 
ever. I shanghied an old cart deck that was off speed for power failure 
recovery storage since the thing had only a 256 byte boot eprom.  When I 
left I took a cart with 3 copy's on it, and a paper copy of the hex 
codes and assembly nemonics if it ever grew an assembler, which it 
didn't. I can reach it by standing up to reach the shelf it is on above 
me.

And if I had to fix it today, I could "get my head" back into "my head" 
easier than I can make python work when it doesn't. I'm lurking here, 
trying to learn about python, but TBT, most of you are talking above my 
pay grade.  Way too afraid you are doing some students homework rather 
than dropping into teacher mode, a fault of this list.

Take care and stay well, all of you.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 
-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Eryk Sun]

Eryk Sun  added the comment:

> In any case, it should not be necessary to get Python permissions 
> to execute write / update methods in Python against HKLM hive

HKEY_LOCAL_MACHINE is a predefined handle for the key "\REGISTRY\MACHINE". This 
key is not mounted by a hive. There are several hives that the system mounts on 
its subkeys, including the SOFTWARE hive. FYI, the list of mounted hives is 
stored as values in "HKLM\SYSTEM\CurrentControlSet\Control\hivelist".

The right to modify system keys is restricted to the administrators local group 
(i.e. alias) and SYSTEM well-known group. In some cases, privileged service 
accounts are also granted full access, particularly TrustedInstaller. By 
default, standard users only have at most read access to system keys, if any 
access at all (e.g. the SECURITY key grants them no access). 

If UAC is disabled (not just its consent prompt), or if an administrator 
account is exempt from UAC restriction, then an administrator gets logged on 
with an access token with elevation type TokenElevationTypeDefault, which has 
full administrator access. (The "Administrator" account, i.e. RID 500, is 
exempt from UAC, but it's disabled by default.) Otherwise an administrator 
account gets logged on with a linked pair of access tokens, and the logon 
returns the limited access token with elevation type TokenElevationTypeLimited. 
For an interactive desktop session, this limited access token is used by 
default for all created processes. It has medium integrity level, no 
administrator privileges (e.g. no SeDebugPrivilege, SeBackupPrivilege, etc), 
and the administrators group is enabled only for access-denied entries in an 
object's discretionary access control list (DACL). 

In order to get full administrator access, a request to create an elevated 
process can be sent to the Appinfo (application information) service, which 
creates the process with the linked TokenElevationTypeFull access token. The 
desktop shell's "run as administrator" option does this. The full access token 
has high (elevated) integrity level, administrator privileges, and the 
administrators group enabled for granting access via access-allowed entries in 
an object's DACL. An administrator may not be aware of this because the OS 
allows some trusted programs to execute with the unlimited access token without 
prompting for consent. 

One can also elevate via the Task Scheduler service. A task can be executed on 
demand via the scheduler COM API, the task scheduler GUI, or CLI `schtasks.exe 
/run /tn taskname`.

I wish you the best of luck in resolving your configuration issues, but this is 
not a bug in Python. Further discussion is not within the scope of this issue 
tracker.

--
resolution:  -> not a bug
stage:  -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Bloody rubbish

[Michael F. Stemper]

On 06/05/2021 11.53, Wayne Lodahl wrote:

On 5/6/21 6:11 AM, Mr Flibble wrote:

Python is slow and significant whitespace is patently absurd.

Bloody rubbish, it's all bloody rubbish.

Message ends.

/Flibble


Machine language is so much simpler, and you can code with just a hexpad.


That's what the sixteen toggle switches are for.

--
Michael F. Stemper
Life's too important to take seriously.
--
https://mail.python.org/mailman/listinfo/python-list

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Gregory P. Smith]

Gregory P. Smith  added the comment:

We try to not add a new parameter in a bugfix release as that can be difficult 
to use.  That said, adding a new bool keyword only parameter to control this 
behavior seems feasible.

Unfortunately you already have to deal with the existence of 3.9.5 having the 
new behavior but not having a control.  (maybe you resort to the global 
behavior change there by monkeypatching the list? removing tab is probably 
enough as I doubt you rely on newlines in your scenario?)

Code wanting to support versions before this patch _and pass that new 
parameter_ winds up needing to resort to inspect.signature(), or a call with 
the parameter, catch the NameError, and retry calling without it pattern.  Not 
unheard of.  And so long as most code doesn't ever need to do that trick, is 
fine.  (it can be checked for at module import time rather than doing it on 
every call to save overhead if that matters)

meta: Marking the issue as open while we decide if we'll be doing something 
here.

--
status: closed -> open

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43972] Simple HTTP Request Handler in http.server does not set a content-length and does not close connections on 301s

[Senthil Kumaran]

Change by Senthil Kumaran :


--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43972] Simple HTTP Request Handler in http.server does not set a content-length and does not close connections on 301s

[miss-islington]

miss-islington  added the comment:


New changeset b391b9b9255697ce6028bb4e7a99c18080aa991c by Miss Islington (bot) 
in branch '3.9':
bpo-43972: Set content-length to 0 for http.server.SimpleHTTPRequestHandler 
301s (GH-25705)
https://github.com/python/cpython/commit/b391b9b9255697ce6028bb4e7a99c18080aa991c


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Daniel Watkins]

Daniel Watkins  added the comment:

(Accidentally dropped Ned from nosy list; apologies!)

--
nosy: +ned.deily

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44059] Support SerenityOS Browser in webbrowser module

[Gregory P. Smith]

Gregory P. Smith  added the comment:


New changeset fbefdaf92e40134c43142c182f7c5bfe406e4c2b by Miss Islington (bot) 
in branch '3.10':
bpo-44059: Register the SerenityOS Browser in the webbrowser module (GH-25947) 
(GH-25950)
https://github.com/python/cpython/commit/fbefdaf92e40134c43142c182f7c5bfe406e4c2b


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43972] Simple HTTP Request Handler in http.server does not set a content-length and does not close connections on 301s

[miss-islington]

miss-islington  added the comment:


New changeset 058f9b27d3838f04bbb313074941e9f9946a33bc by Miss Islington (bot) 
in branch '3.10':
bpo-43972: Set content-length to 0 for http.server.SimpleHTTPRequestHandler 
301s (GH-25705)
https://github.com/python/cpython/commit/058f9b27d3838f04bbb313074941e9f9946a33bc


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Daniel Watkins]

Daniel Watkins  added the comment:

Hey folks,

Thanks for all the work on this: I really appreciate the efforts to keep Python 
as secure as possible!

This change _is_ causing us problems in the cloud-init codebase, which 
thankfully have been caught by our testing in Ubuntu's development release.  
This is in a fairly deep part of the codebase, so apologies in advance for the 
detailed description.

TL;DR: cloud-init constructs mirror URLs and then sanitises them by replacing 
invalid characters with hyphens.  With the fix for this bug, urlsplit silently 
removes (some of) those characters before we can replace them, modifying the 
output of our sanitisation code, and therefore meaning cloud-init will, albeit 
in fairly specific corner cases, configure different mirrors if run with a 
Python including this fix vs. one that precedes it.

cloud-init constructs mirror URLs based on applying cloud metadata to 
user-configured (or default) templates.  As we're responsible for constructing 
these URLs, we also sanitise them before configuring the package manager to use 
them: specifically, we urlsplit to get the hostname, IDNA-encode (to handle 
non-ASCII input), replace any invalid URL characters with a "-", and then strip 
"-" off each part of the hostname (to handle leading/trailing invalid 
characters), then recombine the URL.  The most common case for this is a cloud 
which specifies values for the variables used in the template with an 
underscore: http://my_openstack_region.cloud.archive.ubuntu.com/ubuntu causes 
Apache mirrors with the default "HTTPProtocolOptions Strict" configuration to 
reject all requests to them (as that's an invalid hostname).  In contrast, 
http://my-openstack-region.cloud.archive.ubuntu.com/ubuntu *is* accepted, so is 
preferable.  (This is important because *.cloud.archive.ubuntu.com exists so 
that l
 ocal cloud admins can DNS "hijack" subdomains of it to point at internal 
servers: even though the Ubuntu mirrors don't reject underscored domains (any 
longer), this is a landmine waiting for any admins running their own mirrors.)  
For more background, see the bug where we figured this all out: 
https://bugs.launchpad.net/cloud-init/+bug/1868232

So, more concretely: if we consider a post-templated URL of 
http://my\topenstack\tregion.mirror.internal/ubuntu, cloud-init changes from 
rewriting that to my-openstack-region.mirror.internal (on < 3.9.5) to 
myopenstackregion.mirror.internal (on 3.9.5+): if, in this notional deployment, 
an apt mirror is running at (exactly) my-openstack-region.mirror.internal, then 
new instance deployments will start failing: they won't be able to install 
packages.  This is the sort of breakage that we aim to avoid in cloud-init 
(because you just _know_ that everyone who deployed this cloud left 
NotionalCorp years ago, so fixing the configuration to remove these 
obviously-incorrect tabs is not necessarily trivial).

Given the current state of the fix here, it's not clear to me how we could 
(cleanly) achieve our desired behaviour.  We could perform replacement of these 
characters before invoking `urlsplit` but that would then substitute these 
characters outside of only the hostname: this is also a change in behaviour.  
We could substitute those characters with magic strings, perform the split, and 
then replace them in the non-hostname parts with the original character and in 
the hostname with hyphens: we've obviously left "cleanly" behind at this point. 
 Another option would be to monkeypatch _UNSAFE_URL_BYTES_TO_REMOVE to an empty 
list: again, not a solution I'd want to have to support across Python versions!

One solution that presents itself to me: add a `strip_insecure_characters: bool 
= True` parameter.  We, in cloud-init, would pass this in as `False`, knowing 
that we're going to handle those ourselves.  Of course, this does leave the 
door open for API users to keep the current insecure behaviour: if library code 
(either public or project-internal) were to default to `False`, then the 
situation is no better than today.

For our use case, at least, I think a more restricted solution would work: 
`url_replacement_char: str = ""`.  We'd call `urlsplit(..., 
url_replacement_char="-")` and the rest of our code would work as it does 
today: from its POV, there were never these invalid chars in the first place.


Thanks once again for the work (and apologies for the wall of text)!


Dan

--
nosy: +odd_bloke -ned.deily

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44063] compiler: does not revert back the end_* locations

[Batuhan Taskaya]

Change by Batuhan Taskaya :


--
keywords: +patch
pull_requests: +24617
stage:  -> patch review
pull_request: https://github.com/python/cpython/pull/25956

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44022] urllib http client possible infinite loop on a 100 Continue response

[Ned Deily]

Change by Ned Deily :


--
versions: +Python 3.10, Python 3.8, Python 3.9

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

RE: Bloody rubbish

[Avi Gross via Python-list]

Actually, Joe, putting in any serious program using toggle switches without
anything like a BACKSPACE was very hard as I often had to abort and start
again. Doing it twice the same way, Argh

Luckily, I only had to do it a few times to learn just like I had to write
assembler programs or feed in programs from paper tape or from punch cards.
Most of us have moved on stage by stage and now tools like Python or
libraries and modules often at higher levels are more the norm. 

Can you imagine taking any modern program in digital form as zeroes and ones
and entering it by hand? Some are huge and especially if anything like
shared libraries also has to be keyed in.

But reminiscing is getting away from the point of expressing our sarcasm
about one of the people that makes us want to segregate this forum as one
way to not get into silly discussions like this!

-Original Message-
From: Python-list  On
Behalf Of Joe Pfeiffer
Sent: Thursday, May 6, 2021 3:03 PM
To: python-list@python.org
Subject: Re: Bloody rubbish

Skip Montanaro  writes:

>>
>> Machine language is so much simpler, and you can code with just a hexpad.
>>
>
> Pshaa... All you need are front panel switches. ;-) (Yes, I had a 
> professor who required is to 'key' in our programs on the front panel, 
> of a rack mounted PDP-11 as I recall. Needless to say, we didn't use 
> an assembler either. We just wrote raw opcodes and their arguments on 
> paper. This was in the late 70s.)

That's right about whn I had to do that for one assignment (on a Nova).
Hand-assembling, toggling in, and debugging a program on the front panel was
a valuable learning exercise.  Doing it a second time wouldn't have been
helpful...

One nice thing was the computer had core memory, and the students made an
agreement as to who got which part.  You could work for a while, shut the
machine down, come back the next day, power it up, and your program would
still be there.
--
https://mail.python.org/mailman/listinfo/python-list

-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44063] compiler: does not revert back the end_* locations

[Batuhan Taskaya]

New submission from Batuhan Taskaya :

Something that I've stumbled up while working on another patch is that, the 
compiler doesn't revert the end_lineno and the end_col_offset attributes back 
unlike regular lineno/col_offset. An example of this problem;
ar rcs libpython3.10d.a Modules/getbuildinfo.o Parser/token.o  Parser/pegen.o 
Parser/parser.o Parser/string_parser.o Parser/peg_api.(.venv38) (Python 3.8.5+) 
[ 10:33ÖS ]  [ isidentical@desktop:~/cpython/cpython(main✔) ]
 $ cat t3.py 
def foo(a):
pass

foo(
a=1,
a=2
)

 $ ./python t3.py
  File "/home/isidentical/cpython/cpython/t3.py", line 4
foo(
^
SyntaxError: keyword argument repeated: a

with the fix

 $ ./python t3.py
  File "/home/isidentical/cpython/cpython/t3.py", line 6
a=2
^^^
SyntaxError: keyword argument repeated: a

--
messages: 393138
nosy: BTaskaya
priority: normal
severity: normal
status: open
title: compiler: does not revert back the end_* locations

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44022] urllib http client possible infinite loop on a 100 Continue response

[Gregory P. Smith]

Gregory P. Smith  added the comment:

If anyone wants a CVE for it, that's up to them.  This bug is in the CPython 
http.client module which is what urllib uses for http/https.  I'd rate it low 
severity.  A malicious server can hold a http connection from this library open 
as a network traffic sink.  There are other ways to do that.  ex: Just use omit 
a content-length header in a server response and start streaming an infinite 
response.

The difference in this case being that since the data is thrown away, it isn't 
going to result in memory exhaustion and kill the unfortunate process as trying 
to read an infinite response would.  That's the primary DoS potential from my 
point of view.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43972] Simple HTTP Request Handler in http.server does not set a content-length and does not close connections on 301s

[miss-islington]

Change by miss-islington :


--
nosy: +miss-islington
nosy_count: 2.0 -> 3.0
pull_requests: +24615
pull_request: https://github.com/python/cpython/pull/25952

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue15907] move doctest test-data files into a subdirectory of Lib/test

[Sergey Polischouck]

Change by Sergey Polischouck :


--
nosy: +polischouckserg

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43972] Simple HTTP Request Handler in http.server does not set a content-length and does not close connections on 301s

[miss-islington]

Change by miss-islington :


--
pull_requests: +24616
pull_request: https://github.com/python/cpython/pull/25953

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Gregory P. Smith]

Gregory P. Smith  added the comment:

For completeness reference, the 'main' branch after the master->main rename 
also got fixed to check it early the same was as the release branches via:
 
https://github.com/python/cpython/commit/985ac016373403e8ad41f8d563c4355ffa8d49ff

our robot updating bug comments presumably didn't know about the master -> main 
rename yet so didn't leave a comment here.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44062] cross: wrong interpreter returned when no python available

[Vincent Fazio]

Change by Vincent Fazio :


--
keywords: +patch
pull_requests: +24614
stage:  -> patch review
pull_request: https://github.com/python/cpython/pull/25951

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Shreyan Avigyan]

Change by Shreyan Avigyan :


--
versions: +Python 3.11

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Shreyan Avigyan]

Shreyan Avigyan  added the comment:

It's mentioned that Python 3.9.5 has this regression but the code works fine on 
my windows machine. Is this only reproducible on POSIX?

--
nosy: +shreyanavigyan
versions:  -Python 3.11

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Bloody rubbish

[Joe Pfeiffer]

Skip Montanaro  writes:

>>
>> Machine language is so much simpler, and you can code with just a hexpad.
>>
>
> Pshaa... All you need are front panel switches. ;-) (Yes, I had a professor
> who required is to 'key' in our programs on the front panel, of a rack
> mounted PDP-11 as I recall. Needless to say, we didn't use an assembler
> either. We just wrote raw opcodes and their arguments on paper. This was in
> the late 70s.)

That's right about whn I had to do that for one assignment (on a Nova).
Hand-assembling, toggling in, and debugging a program on the front panel
was a valuable learning exercise.  Doing it a second time wouldn't have
been helpful...

One nice thing was the computer had core memory, and the students made
an agreement as to who got which part.  You could work for a while, shut
the machine down, come back the next day, power it up, and your program
would still be there.
-- 
https://mail.python.org/mailman/listinfo/python-list

[issue43743] BlockingIOError: [Errno 11] Resource temporarily unavailable: on GPFS.

[Gregory P. Smith]

Gregory P. Smith  added the comment:

I don't believe CPython should be working around a bug in specific Linux kernel 
versions in the standard library unless they are extremely pernicious and not 
considered to be a bug and thus ever be fixed in the OS kernel.

As the sendfile system call appears to infinitely return one of EAGAIN, 
EALREADY, EWOULDBLOCK, or EINPROGRESS in this case, there isn't anything 
CPython could do.  A retry/backoff loop won't help.

This should be worked around at the application level by whatever means are 
appropriate.

--
nosy: +gregory.p.smith
resolution:  -> not a bug
stage:  -> resolved
status: open -> closed
type: crash -> behavior

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44059] Support SerenityOS Browser in webbrowser module

[miss-islington]

Change by miss-islington :


--
nosy: +miss-islington
nosy_count: 2.0 -> 3.0
pull_requests: +24613
pull_request: https://github.com/python/cpython/pull/25950

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Steve Dower]

Steve Dower  added the comment:

To be clear, I'll get to this when I can, but if someone else wants to write 
the fix I'm happy to review and merge. Don't wait for me to do this one just 
because I'm assigned.

--
versions: +Python 3.11

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Steve Dower]

Steve Dower  added the comment:

Looks like it was always getting lucky in the past, as sys.path requires 
strings, and the "path" argument here is an alternative to it. The cache was 
definitely not working as intended.

So while it's not clearly documented anywhere (other than the related 
pkgutil.extend_path() method saying it'll ignore non-str paths), we do need to 
only be passing str into _importlib_bootstrap.

I can't do the pkgutil updates right now, but I think it's just get_importer 
than needs an os.fsdecode() call around its argument. Maybe some others in the 
same module. And add tests :)

--
keywords: +easy

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44059] Support SerenityOS Browser in webbrowser module

[Gregory P. Smith]

Gregory P. Smith  added the comment:

Quite a humorous long list of historical browsers still in the webbrowser 
module.  This can join the list.  The PR should automerge after the CI runs 
complete.

--
assignee:  -> gregory.p.smith
nosy: +gregory.p.smith

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Gregory P. Smith]

Gregory P. Smith  added the comment:

(obviously we're missing any tests for use of Path objects in this situation)

--
stage:  -> needs patch
type: crash -> behavior

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43105] [Windows] Can't import extension modules resolved via relative paths in sys.path

[Gregory P. Smith]

Gregory P. Smith  added the comment:

This caused a regression described in https://bugs.python.org/issue44061

--
nosy: +gregory.p.smith

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Gregory P. Smith]

Gregory P. Smith  added the comment:

https://bugs.python.org/issue43105 and 
https://github.com/python/cpython/pull/25121 caused this regression.

--
assignee:  -> steve.dower
keywords: +3.8regression, 3.9regression
nosy: +gregory.p.smith, lukasz.langa, steve.dower
priority: normal -> release blocker
versions: +Python 3.10

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Shreyan Avigyan]

Shreyan Avigyan  added the comment:

Don't run VSCode in admin mode. Just set python to admin mode. See if it works 
then.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Paul]

Paul  added the comment:

"Here's something you should know about Windows, even if a local account is in 
the Administrators group, it still has restrictions on what it can do, it just 
has the power to elevate itself without requiring login credentials (VIA UAC 
prompts)."

@William:
Sure, I understand that, which is also why I have UAC prompts disabled.  Also, 
there are additional security settings that most people do not know about 
Administrator accounts:  There are permission settings that go much further 
than Administrator and disabling of UAC, which is also providing your user 
account "system" level permissions, and "Act as part of the operating system".  
This pretty much puts your account in "god mode" where you can do all kinds of 
things that most of us probably shouldn't need to do for most situations, but 
it is there when needed.  In any case, it should not be necessary to get Python 
permissions to execute write / update methods in Python against HKLM hive. I 
definitely don't need to do much to get it to work in C# or C++ just fine.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44062] cross: wrong interpreter returned when no python available

[Vincent Fazio]

New submission from Vincent Fazio :

When trying to cross compile python3.9, `configure` attempts to find a strict 
python 3.9 version match, however if it fails it still attempts to use `python` 
in PYTHON_FOR_BUILD instead of failing outright like the code implies it should

$/python3/targetbuild# which python3.9 python3 python
/usr/bin/python3

$/python3/targetbuild# python3 --version
Python 3.7.3

$/python3/targetbuild# PYTHON_FOR_REGEN=/python3/hostbuild/python \
ac_cv_file__dev_ptmx=yes \
ac_cv_file__dev_ptc=no \
ac_cv_buggy_getaddrinfo=no \
../configure --build=x86-linux-gnu \
--host=aarch64-linux-gnu \
--enable-loadable-sqlite-extensions \
--enable-option-checking=fatal \
--enable-shared \
--with-system-expat \
--with-system-ffi \
--without-ensurepip
checking build system type... x86-unknown-linux-gnu
checking host system type... aarch64-unknown-linux-gnu
checking for python3.9... /python3/hostbuild/python
checking for python interpreter for cross build... python
...

$/python3/targetbuild# grep PYTHON_FOR_BUILD config.log 
PYTHON_FOR_BUILD='_PYTHON_PROJECT_BASE=$(abs_builddir) 
_PYTHON_HOST_PLATFORM=$(_PYTHON_HOST_PLATFORM) PYTHONPATH=$(shell test -f 
pybuilddir.txt && echo $(abs_builddir)/`cat pybuilddir.txt`:)$(srcdir)/Lib 
_PYTHON_SYSCONFIGDATA_NAME=_sysconfigdata_$(ABIFLAGS)_$(MACHDEP)_$(MULTIARCH) 
python'


in configure

if test "$cross_compiling" = yes; then
AC_MSG_CHECKING([for python interpreter for cross build])
if test -z "$PYTHON_FOR_BUILD"; then
for interp in python$PACKAGE_VERSION python3 python; do
which $interp >/dev/null 2>&1 || continue
if $interp -c "import sys;sys.exit(not '.'.join(str(n) for n in 
sys.version_info@<:@:2@:>@) == '$PACKAGE_VERSION')"; then
break
fi
interp=
done
if test x$interp = x; then
AC_MSG_ERROR([python$PACKAGE_VERSION interpreter not found])
fi
AC_MSG_RESULT($interp)
PYTHON_FOR_BUILD='_PYTHON_PROJECT_BASE=$(abs_builddir) 
_PYTHON_HOST_PLATFORM=$(_PYTHON_HOST_PLATFORM) PYTHONPATH=$(shell test -f 
pybuilddir.txt && echo $(abs_builddir)/`cat pybuilddir.txt`:)$(srcdir)/Lib 
_PYTHON_SYSCONFIGDATA_NAME=_sysconfigdata_$(ABIFLAGS)_$(MACHDEP)_$(MULTIARCH) 
'$interp
fi
elif test "$cross_compiling" = maybe; then
AC_MSG_ERROR([Cross compiling required --host=HOST-TUPLE and --build=ARCH])
else
PYTHON_FOR_BUILD='./$(BUILDPYTHON) -E'
fi
AC_SUBST(PYTHON_FOR_BUILD)


The issue is a failing edge case here:

for interp in python$PACKAGE_VERSION python3 python; do
which $interp >/dev/null 2>&1 || continue

where interp keeps it's last value doesn't trigger the empty check here:

if test x$interp = x; then
AC_MSG_ERROR([python$PACKAGE_VERSION interpreter not found])
fi

Note that there's an explicit clearing of interp when the python version isn't 
a match:

if $interp -c "import sys;sys.exit(not '.'.join(str(n) for n in 
sys.version_info@<:@:2@:>@) == '$PACKAGE_VERSION')"; then
break
fi
interp=


The fix should be pretty straightforward:

for interp in python$PACKAGE_VERSION python3 python ''; do

adding '' as the last possible interpreter means one hasn't been found up to 
that point and allows configure to properly fail

$/python3/targetbuild# PYTHON_FOR_REGEN=/python3/hostbuild/python 
ac_cv_file__dev_ptmx=yes ac_cv_file__dev_ptc=no ac_cv_buggy_getaddrinfo=no 
../configure --build=x86-linux-gnu --host=aarch64-linux-gnu 
--enable-loadable-sqlite-extensions --enable-option-checking=fatal 
--enable-shared --with-system-expat --with-system-ffi --without-ensurepip
checking build system type... x86-unknown-linux-gnu
checking host system type... aarch64-unknown-linux-gnu
checking for python3.9... /python3/hostbuild/python
checking for python interpreter for cross build... configure: error: python3.9 
interpreter not found

It will continue to work when a proper interpreter is found

$/python3/targetbuild# PATH=/python3/hostbuild:$PATH 
PYTHON_FOR_REGEN=/python3/hostbuild/python ac_cv_file__dev_ptmx=yes 
ac_cv_file__dev_ptc=no ac_cv_buggy_getaddrinfo=no ../configure 
--build=x86-linux-gnu --host=aarch64-linux-gnu 
--enable-loadable-sqlite-extensions --enable-option-checking=fatal 
--enable-shared --with-system-expat --with-system-ffi --without-ensurepip
checking build system type... x86-unknown-linux-gnu
checking host system type... aarch64-unknown-linux-gnu
checking for python3.9... /python3/hostbuild/python
checking for python interpreter for cross build... Could not find platform 
dependent libraries 
Consider setting $PYTHONHOME to [:]
python


This should help highlight any inconsistent environment between configuring and 
building.

--
components: Cross-Build
messages: 393125
nosy: Alex.Willmer, vfazio
priority: normal
severity: normal
status: open
title: cross: 

Re: Bloody rubbish

[Christian Gollwitzer]

Am 06.05.21 um 19:54 schrieb Skip Montanaro:


Machine language is so much simpler, and you can code with just a hexpad.



Pshaa... All you need are front panel switches. ;-) (Yes, I had a professor
who required is to 'key' in our programs on the front panel, of a rack
mounted PDP-11 as I recall. Needless to say, we didn't use an assembler
either. We just wrote raw opcodes and their arguments on paper. This was in
the late 70s.)


Pure luxury! https://xkcd.com/378/

Christian
--
https://mail.python.org/mailman/listinfo/python-list

Re: Proposal: Disconnect comp.lang.python from python-list

[Paul Bryan]

I do not believe my proposal has reached—or will reach—consensus. It
seems there are some who still value the linkage between the two, and
the S/N ratio is indeed low enough it doesn't warrant changing from the
status quo. Thanks everyone for the consideration and discussion. 

Paul

On Thu, 2021-05-06 at 18:49 +0100, Stestagg wrote:
> Where's this discussion going?
> 
> Let's not get too caught up on definitions or the sizes of everyone's
> respective .. newsgroups.
> 
> Which of the practically possible options are best for this list <->
> newsgroup setup?
> 
> Thanks
> 
> Steve
> 
> On Thu, May 6, 2021 at 6:47 PM Jon Ribbens via Python-list <
> python-list@python.org> wrote:
> 
> > On 2021-05-06, Richard Damon  wrote:
> > > On 5/6/21 9:44 AM, Jon Ribbens via Python-list wrote:
> > > > Sounds like nearly all moderated lists/forums then.
> > > 
> > > Then perhaps you have never been on a real Moderated mailing list
> > > or
> > > Forum.
> > 
> > Ah, the "no true scotsforum" argument ;-)
> > 
> > > > > While you could setup a robo-moderator to do a similar thing,
> > > > > Usenet
> > > > > posters will not have 'pre-subscribed' before posting, and
> > > > > the From
> > > > > address is no where near as relaible as invalid From
> > > > > addresses ARE
> > > > > allowed, and since the message comes via a NNTP injection
> > > > > source relay,
> > > > > non-verifiable. This make the job a LOT harder.
> > > > It makes essentially no difference at all.
> > > It sure does. Have you every actually TRIED to run a moderated
> > > Usenet
> > > group, or know anyone who has, especially a somewhat busy group?
> > 
> > As I already mentioned, I am a moderator of a Usenet group.
> > 
> > > I am presuming that the current gateway isn't bringing all the
> > > messages
> > > from Usenet into the mailing list. This is obvious as we don't
> > > see the
> > > noise here. The Cabal that runs the 'Big-8' doesn't really care
> > > what
> > > sort of filters are added at such a gateway.
> > > 
> > > To setup a moderated group that defines similar filters in place
> > > for
> > > messages getting to Usenet, particularly for a group intended to
> > > replace
> > > a 'reasonably' working unmoderated group, is likely not going to
> > > be
> > > viewed well.
> > 
> > Have you every actually TRIED to run a moderated Usenet group, or
> > know
> > anyone who has, especially a somewhat busy group? Of *course*
> > moderated
> > groups put filters on what they receive, what do you think group
> > moderation is *for* if not to block things?
> > --
> > https://mail.python.org/mailman/listinfo/python-list
> > 

-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Paul]

Paul  added the comment:

"The most easy way to do is right click on the application you're running the 
code from, click Run as Administrator and then run the code in that 
application. You'll not get any WinError. And also being in the Administrators 
group doesn't mean whatever application you run has the permission. You have 
the permission to do manually not the application right? I'm saying this 
because I'm the admin of my computer still Python raises WinError if I run it 
normally. Being the admin of my computer I still have to run Python in elevated 
mode. Windows considers Python as a third party app and it'll not give admin 
access to it so easily."

@Shreyan, Yes, totally understand that.  I am also keenly aware of this, 
because often times for low-level, environment-related solutions in Visual 
Studio, I have had to set Visual Studio IDE to run as administrator in order 
for certain operations to function properly.  In the case of Python, I am 
currently using VSCode.  When I have set code.exe to run as administrator, and 
configure python.exe to run as administrator under Compatibility mode, then 
both VS Code and Python starts acting strange.  From the IDE, I can no longer 
run in debug mode, and any output that is generated is launched in a separate 
console window, which is viewable only briefly.

So... what I also tried was just eliminating VS Code from the equation at the 
moment.  I run a DOS console as Administrator, then just call Python directly 
along with the .py, and the WinError 5 stops getting thrown.  However, the 
other thing I noticed is that when python.exe is set to run as administrator 
under Compatibility Mode, and you reopen solution in VS Code, I noticed that 
the winregistry library stops getting recognized.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Proposal: Disconnect comp.lang.python from python-list

[Jon Ribbens via Python-list]

On 2021-05-06, Stestagg  wrote:
> Where's this discussion going?
>
> Let's not get too caught up on definitions or the sizes of everyone's
> respective .. newsgroups.
>
> Which of the practically possible options are best for this list <->
> newsgroup setup?

As before I'd suggest that changing the group to be moderated,
or switching to a parallel moderated group, is at the very least
worth trying. There's no obvious downside and it requires very
little work from anyone (indeed no work at all after the initial
setup). None of the objections raised so far have any basis
whatsoever in reality. And it appears even the suggestion that
Mailman 3 cannot be used while a gateway is involved is untrue:
https://mailman.readthedocs.io/en/latest/src/mailman/handlers/docs/nntp.html
-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Eryk Sun]

Eryk Sun  added the comment:

Thank you. The output shows that the Python process is using a UAC limited 
security context, i.e. the administrators group is enabled only for 
access-denied rules, and the integrity level is medium (not elevated to high or 
system level). 

Group Name: BUILTIN\Administrators
Type:   Alias
SID:S-1-5-32-544
Attributes: Group used for deny only

Group Name: Mandatory Label\Medium Mandatory Level
Type:   Label
SID:S-1-16-8192
Attributes:

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43972] Simple HTTP Request Handler in http.server does not set a content-length and does not close connections on 301s

[Senthil Kumaran]

Change by Senthil Kumaran :


--
versions: +Python 3.10, Python 3.9

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43972] Simple HTTP Request Handler in http.server does not set a content-length and does not close connections on 301s

[Senthil Kumaran]

Senthil Kumaran  added the comment:

Hi Stephen, 

Thanks for the response and the details. I was able to verify the bug!
I don't know exactly what I was doing previously, but I agree with you that 
this is a bug and will be fixed with your patch. :) 

Thanks,
Senthil

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Paul]

Paul  added the comment:

@Eryk:

GROUP INFORMATION
-

Group Name: Everyone
Type:   Well-known group
SID:S-1-1-0
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: NT AUTHORITY\Local account and member of Administrators group
Type:   Well-known group
SID:S-1-5-114
Attributes: Group used for deny only

Group Name: MACHINE_NAME\docker-users
Type:   Alias
SID:S-1-5-21-3084499296-1678378808-3679662973-1002
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: MACHINE_NAME\ORA_ASMDBA
Type:   Alias
SID:S-1-5-21-3084499296-1678378808-3679662973-1028
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: MACHINE_NAME\ORA_DBA
Type:   Alias
SID:S-1-5-21-3084499296-1678378808-3679662973-1019
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: MACHINE_NAME\ORA_OraDB18Home1_SYSBACKUP
Type:   Alias
SID:S-1-5-21-3084499296-1678378808-3679662973-1025
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: MACHINE_NAME\ORA_OraDB18Home1_SYSDG
Type:   Alias
SID:S-1-5-21-3084499296-1678378808-3679662973-1026
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: MACHINE_NAME\ORA_OraDB18Home1_SYSKM
Type:   Alias
SID:S-1-5-21-3084499296-1678378808-3679662973-1027
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: BUILTIN\Administrators
Type:   Alias
SID:S-1-5-32-544
Attributes: Group used for deny only

Group Name: BUILTIN\Users
Type:   Alias
SID:S-1-5-32-545
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: NT AUTHORITY\INTERACTIVE
Type:   Well-known group
SID:S-1-5-4
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: CONSOLE LOGON
Type:   Well-known group
SID:S-1-2-1
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: NT AUTHORITY\Authenticated Users
Type:   Well-known group
SID:S-1-5-11
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: NT AUTHORITY\This Organization
Type:   Well-known group
SID:S-1-5-15
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: NT AUTHORITY\Local account
Type:   Well-known group
SID:S-1-5-113
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: LOCAL
Type:   Well-known group
SID:S-1-2-0
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: NT AUTHORITY\NTLM Authentication
Type:   Well-known group
SID:S-1-5-64-10
Attributes: Mandatory group, Enabled by default, Enabled group

Group Name: Mandatory Label\Medium Mandatory Level
Type:   Label
SID:S-1-16-8192
Attributes:

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Bloody rubbish

[Skip Montanaro]

>
> Machine language is so much simpler, and you can code with just a hexpad.
>

Pshaa... All you need are front panel switches. ;-) (Yes, I had a professor
who required is to 'key' in our programs on the front panel, of a rack
mounted PDP-11 as I recall. Needless to say, we didn't use an assembler
either. We just wrote raw opcodes and their arguments on paper. This was in
the late 70s.)

Skip

>
-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44061] Regression in pkgutil: iter_modules stopped taking Path argument in python 3.8.10 and 3.9.5

[Rikard Nordgren]

New submission from Rikard Nordgren :

The pkgutil.iter_modules crash when using Path object in the first argument. 
The code below works in python 3.8.9 and 3.9.4, but stopped working in python 
3.8.10 and 3.9.5. Changing from Path to str works in all versions.


import pkgutil
from pathlib import Path

for _, modname, ispkg in pkgutil.iter_modules([Path("/home")], 
'somepackage.somesubpackage'):
print(modname, ispkg)


Error message from python 3.8.10 (other path was used):

Traceback (most recent call last):
  File "/home/devel/Python-3.8.10/Lib/pkgutil.py", line 415, in get_importer
importer = sys.path_importer_cache[path_item]
KeyError: PosixPath('/home/devel/pharmpy/src/pharmpy/plugins')

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "pyissue.py", line 5, in 
for _, modname, ispkg in 
pkgutil.iter_modules([Path("/home/devel/pharmpy/src/pharmpy/plugins")], 
'pharmpy.plugins'):
  File "/home/devel/Python-3.8.10/Lib/pkgutil.py", line 129, in iter_modules
for i in importers:
  File "/home/devel/Python-3.8.10/Lib/pkgutil.py", line 419, in get_importer
importer = path_hook(path_item)
  File "", line 1594, in 
path_hook_for_FileFinder
  File "", line 1469, in __init__
  File "", line 177, in _path_isabs
AttributeError: 'PosixPath' object has no attribute 'startswith'

--
components: Library (Lib)
messages: 393120
nosy: rikard.nordgren
priority: normal
severity: normal
status: open
title: Regression in pkgutil: iter_modules stopped taking Path argument in 
python 3.8.10 and 3.9.5
type: crash
versions: Python 3.8, Python 3.9

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Eryk Sun]

Eryk Sun  added the comment:

> The whoami process check output shows that my account is in 
> BUILTIN\Administrators, which proves that the account I am 
> logged in as local Administrator permissions.

Please show the output when whoami.exe is spawned from Python. I never 
questioned whether your account is in the administrators group. I need to know 
exactly how the group is flagged and/or enabled in the security context of the 
Python process. For example, a UAC limited logon will include the group with a 
flag that enables it only for access-denied entries in an object's 
discretionary access control list (DACL):

Group Name: BUILTIN\Administrators
Type:   Alias
SID:S-1-5-32-544
Attributes: Group used for deny only

For the group to apply to access-allowed entries in a DACL, it must be enabled 
as follows:

Group Name: BUILTIN\Administrators
Type:   Alias
SID:S-1-5-32-544
Attributes: Mandatory group, Enabled by default, Enabled group, Group owner

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Proposal: Disconnect comp.lang.python from python-list

[Stestagg]

Where's this discussion going?

Let's not get too caught up on definitions or the sizes of everyone's
respective .. newsgroups.

Which of the practically possible options are best for this list <->
newsgroup setup?

Thanks

Steve

On Thu, May 6, 2021 at 6:47 PM Jon Ribbens via Python-list <
python-list@python.org> wrote:

> On 2021-05-06, Richard Damon  wrote:
> > On 5/6/21 9:44 AM, Jon Ribbens via Python-list wrote:
> >> Sounds like nearly all moderated lists/forums then.
> >
> > Then perhaps you have never been on a real Moderated mailing list or
> > Forum.
>
> Ah, the "no true scotsforum" argument ;-)
>
> >>> While you could setup a robo-moderator to do a similar thing, Usenet
> >>> posters will not have 'pre-subscribed' before posting, and the From
> >>> address is no where near as relaible as invalid From addresses ARE
> >>> allowed, and since the message comes via a NNTP injection source relay,
> >>> non-verifiable. This make the job a LOT harder.
> >> It makes essentially no difference at all.
> > It sure does. Have you every actually TRIED to run a moderated Usenet
> > group, or know anyone who has, especially a somewhat busy group?
>
> As I already mentioned, I am a moderator of a Usenet group.
>
> > I am presuming that the current gateway isn't bringing all the messages
> > from Usenet into the mailing list. This is obvious as we don't see the
> > noise here. The Cabal that runs the 'Big-8' doesn't really care what
> > sort of filters are added at such a gateway.
> >
> > To setup a moderated group that defines similar filters in place for
> > messages getting to Usenet, particularly for a group intended to replace
> > a 'reasonably' working unmoderated group, is likely not going to be
> > viewed well.
>
> Have you every actually TRIED to run a moderated Usenet group, or know
> anyone who has, especially a somewhat busy group? Of *course* moderated
> groups put filters on what they receive, what do you think group
> moderation is *for* if not to block things?
> --
> https://mail.python.org/mailman/listinfo/python-list
>
-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Shreyan Avigyan]

Shreyan Avigyan  added the comment:

The most easy way to do is right click on the application you're running the 
code from, click Run as Administrator and then run the code in that 
application. You'll not get any WinError. And also being in the Administrators 
group doesn't mean whatever application you run has the permission. You have 
the permission to do manually not the application right? I'm saying this 
because I'm the admin of my computer still Python raises WinError if I run it 
normally. Being the admin of my computer I still have to run Python in elevated 
mode. Windows considers Python as a third party app and it'll not give admin 
access to it so easily.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Proposal: Disconnect comp.lang.python from python-list

[Jon Ribbens via Python-list]

On 2021-05-06, Richard Damon  wrote:
> On 5/6/21 9:44 AM, Jon Ribbens via Python-list wrote:
>> Sounds like nearly all moderated lists/forums then.
>
> Then perhaps you have never been on a real Moderated mailing list or
> Forum.

Ah, the "no true scotsforum" argument ;-)

>>> While you could setup a robo-moderator to do a similar thing, Usenet
>>> posters will not have 'pre-subscribed' before posting, and the From
>>> address is no where near as relaible as invalid From addresses ARE
>>> allowed, and since the message comes via a NNTP injection source relay,
>>> non-verifiable. This make the job a LOT harder.
>> It makes essentially no difference at all.
> It sure does. Have you every actually TRIED to run a moderated Usenet
> group, or know anyone who has, especially a somewhat busy group?

As I already mentioned, I am a moderator of a Usenet group.

> I am presuming that the current gateway isn't bringing all the messages
> from Usenet into the mailing list. This is obvious as we don't see the
> noise here. The Cabal that runs the 'Big-8' doesn't really care what
> sort of filters are added at such a gateway.
>
> To setup a moderated group that defines similar filters in place for
> messages getting to Usenet, particularly for a group intended to replace
> a 'reasonably' working unmoderated group, is likely not going to be
> viewed well.

Have you every actually TRIED to run a moderated Usenet group, or know
anyone who has, especially a somewhat busy group? Of *course* moderated
groups put filters on what they receive, what do you think group
moderation is *for* if not to block things?
-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[William Pickard]

William Pickard  added the comment:

Here's something you should know about Windows, even if a local account is in 
the Administrators group, it still has restrictions on what it can do, it just 
has the power to elevate itself without requiring login credentials (VIA UAC 
prompts).

This group functions very similar to the sudoers group in Linux.

I expect that disabling UAC only causes Windows to automatically approve them 
on Administrator accounts and deny on non-Administrator accounts for 
applications that explicitly require the prompt (Run as Administrator special 
flag).

There exists a hidden deactivated account called Administrator in Windows that 
functions very similar to root in Linux. UAC prompts are to allow an 
application to run under a temporary Windows Logon session as this hidden 
account while using your logon session, aka elevation.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Proposal: Disconnect comp.lang.python from python-list

[Chris Green]

Grant Edwards  wrote:
> On 2021-05-06, Chris Green  wrote:
> > Grant Edwards  wrote:
> >
> >> Pointing a newsreader at news.gmane.io allows one to participate in
> >> the mailing list just fine without using Usenet.
> >> 
> > ???  Surely that *is* using Usenet, at least you're using NNTP which
> > is the Usenet protocol.  What's "not Usenet" about it?
> 
> Usenet was a distributed network of computers that transferred
> articles amongst themselves using various protocols, and provided
> access to readers in various ways (NNTP being one of them).
> 
Usenet *is* still this


> Gmane was not and is not part of that network. It is a single,
> stand-alone machine operating as an email list archiver/gateway that
> provides access to read/post via NTTP.
> 
It is effectively part of Usenet because the mailing lists it hosts
and gateways to its newserver are peered with Usenet.  

I read several gmane 'lists' via usenet, I most certainly don't get
them directly from gmane, I get them from other usenet servers.

-- 
Chris Green
·
-- 
https://mail.python.org/mailman/listinfo/python-list

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

[Paul]

Paul  added the comment:

Eryk:

The whoami process check output shows that my account is in 
BUILTIN\Administrators, which proves that the account I am logged in as local 
Administrator permissions.

As for the OpenKey method, it fails with [WinError 5] Access denied, exactly 
the same way my example also failed, and the reason why these consistently fail 
is because they are pointed to HKLM, essentially replicating the issue that I 
pointed out.  I have also tried different combinations of security flags 
(winreg.KEY_ALL_ACCESS, winreg.KEY_WOW64_64KEY, etc.), but keep getting the 
same results.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Proposal: Disconnect comp.lang.python from python-list

[Richard Damon]

On 5/6/21 9:44 AM, Jon Ribbens via Python-list wrote:
> On 2021-05-06, Richard Damon  wrote:
>> On 5/6/21 6:12 AM, Jon Ribbens via Python-list wrote:
>>> I think you're fundamentally missing the point that the newsgroup is
>>> *already gatewayed to the mailing list*. Marking the group moderated
>>> will not result in any more work for the moderators. In fact what you
>>> say above is the opposite of the truth, as it will result in the link
>>> between the poster and the moderators becoming more direct, not less
>>> direct.
>> It will.
> How? How would switching from a bi-directional gateway to a moderated
> group make any more work for anyone than the existing bi-directional
> gateway to an unmoderated group?
>
>> First, python-list@python.org is NOT a "Moderated" mailing list by the
>> standard definition of such. Maybe you could call it Moderatable, but
>> most messages make it to the list without any intervention by a
>> moderator.
> Sounds like nearly all moderated lists/forums then.

Then perhaps you have never been on a real Moderated mailing list or
Forum. Lists/Forum when described as moderated normally means that a
human eyeball looks at EVERY (or almost every) message before it goes
public.

>> The Mailman software that runs the list allows the administrators of
>> the list to put select filters on posts, or to make certain posters
>> moderated and need their posts reviewed, but most posts go through
>> automatically and immediately. This works because the SMTP Email
>> system have a must better presumption of the From address in the
>> message actually being who the sender is then under NNTP rules.
> The SMTP mail system makes no such assumption whatsoever.

Maybe not be the absolute letter of the rules, but it does in practice.
Especially if a person intends for their messages to be able to be
delivered to most mail servers. At the very least, the email envelope
will have an apparently valid email address, or most email systems will
refuse it. Protocols like SPF will verify that the message does come
from who it says, or at least there is a responsible party that will
deal with things, or that whole domain get put into block lists. Email
from 'known senders' tends to be reliably marked, and you need to
subscribe to the list and become a 'known sender'. Once you have gone
through the NNTP gateway, you lose all of that.

>> Forging it is detectable in many cases and generally a violation of
>> the TOS for most providers (and the ones that don't can easily be
>> blocked).
> Sounds a lot like Usenet then.
Many Usenet providers do NOT require users to use valid email address as
their From (You can't subscribe such an address to the mailing list to
be able to post from it). They might prohibit explicitly forging someone
else's email address, but Nym Shifiting is common and accepted on Usenet
(SOME providers might limit it, but not all)
>> While you could setup a robo-moderator to do a similar thing, Usenet
>> posters will not have 'pre-subscribed' before posting, and the From
>> address is no where near as relaible as invalid From addresses ARE
>> allowed, and since the message comes via a NNTP injection source relay,
>> non-verifiable. This make the job a LOT harder.
> It makes essentially no difference at all.
It sure does. Have you every actually TRIED to run a moderated Usenet
group, or know anyone who has, especially a somewhat busy group?
>> The current setup does put rules at the gateway that controls what gets
>> onto the mailing list, and because it IS a gateway, there are easier
>> grounds to establish that some posts just won't be gated over from
>> usenet to the mailing list. Putting those same limits onto the moderated
>> group itself would be against Usenet norms. This would mean that the
>> Usenet moderation queue WILL require significant additional work over
>> what is currently being done for the mailing list.
> Could you explain what on earth you are on about here please?

I am presuming that the current gateway isn't bringing all the messages
from Usenet into the mailing list. This is obvious as we don't see the
noise here. The Cabal that runs the 'Big-8' doesn't really care what
sort of filters are added at such a gateway.

To setup a moderated group that defines similar filters in place for
messages getting to Usenet, particularly for a group intended to replace
a 'reasonably' working unmoderated group, is likely not going to be
viewed well. In the old days of actual voting for new groups, just
saying you intended to do such got you a lot of negative votes. Not
sayng you are going to do it, and then doing it, might get the Big-8

>
>> If the idea is just to provide a NNTP accessible version of the mailing
>> list, than perhaps rather than a comp.* group, putting it on gmane would
>> be a viable option, that avoids some of the Usenet issues.
> How would that make any difference?

gmane is not Usenet. If you just want NNTP access, but not the problems
of general Usenet, it is an 

[issue43558] The dataclasses documentation should mention how to call super().__init__

[Eric V. Smith]

Eric V. Smith  added the comment:

Sure. Take your time! Thank you in advance for your contribution.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43558] The dataclasses documentation should mention how to call super().__init__

[Douwe Hoekstra]

Douwe Hoekstra  added the comment:

I'd like to fix this. Since this would be my first contribution ever, I will 
need some time to figure out procedures and style requirements regarding 
documentation. I estimate this will take me no longer than 3 days.

--
nosy: +dhoekstra

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Ned Deily]

Change by Ned Deily :


--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44022] urllib http client possible infinite loop on a 100 Continue response

[Ned Deily]

Change by Ned Deily :


--
stage: commit review -> resolved
versions: +Python 3.6, Python 3.7 -Python 3.10, Python 3.11, Python 3.8, Python 
3.9

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44022] urllib http client possible infinite loop on a 100 Continue response

[Ned Deily]

Ned Deily  added the comment:


New changeset 078b146f062d212919d0ba25e34e658a8234aa63 by Miss Islington (bot) 
in branch '3.7':
bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 
Continue (GH-25916) (GH-25934)
https://github.com/python/cpython/commit/078b146f062d212919d0ba25e34e658a8234aa63


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44055] NamedTemporaryFile opened twice on Windows

[Eryk Sun]

Eryk Sun  added the comment:

Your example uses delete=False. In Windows, the provision about reopening the 
file while it's open applies to delete=True. With the latter, the file is 
opened with the O_TEMPORARY flag. At the OS level, this flag modifies the 
CreateFileW() call as follows:

 dwDesiredAccess |= DELETE; 
 dwShareMode |= FILE_SHARE_DELETE; 
 dwFlagsAndAttributes |= FILE_FLAG_DELETE_ON_CLOSE;

Because the open has delete access, which it shares, it can be opened again 
only if the open shares delete access. An open that doesn't share delete access 
will fail with a sharing violation. It can be reopened with os.open() with the 
O_TEMPORARY flag, since this shares delete access. But Python's builtin open() 
does not share delete access, and neither do most other programs with which one 
might want to reopen the file. 

This behavior is limiting to the point of making NamedTemporaryFile() 
practically useless in Windows with delete=True. There is an ongoing discussion 
about redesigning NamedTemporaryFile() to never use O_TEMPORARY in Windows.

--
nosy: +eryksun
type:  -> enhancement

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44022] urllib http client possible infinite loop on a 100 Continue response

[Ned Deily]

Ned Deily  added the comment:


New changeset f68d2d69f1da56c2aea1293ecf93ab69a6010ad7 by Miss Islington (bot) 
in branch '3.6':
bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 
Continue (GH-25916) (GH-25935)
https://github.com/python/cpython/commit/f68d2d69f1da56c2aea1293ecf93ab69a6010ad7


--
nosy: +ned.deily

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43075] ReDoS in urllib.request

[Ned Deily]

Change by Ned Deily :


--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43075] ReDoS in urllib.request

[Ned Deily]

Ned Deily  added the comment:


New changeset 3fbe96123aeb4fa547a8f6022efa2dc8788f by Miss Islington (bot) 
in branch '3.6':
bpo-43075: Fix ReDoS in urllib AbstractBasicAuthHandler (GH-24391) (GH-25250)
https://github.com/python/cpython/commit/3fbe96123aeb4fa547a8f6022efa2dc8788f


--
nosy: +ned.deily

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Bloody rubbish

[Michael Torrie]

On 5/5/21 8:58 PM, Joe Pfeiffer wrote:
> Mr Flibble  writes:
> 
>> Python is slow and significant whitespace is patently absurd.
> 
> Why am I not surprised to learn your "fast" implementation turns out to
> be something other than python?

And it's bizarre that the OP, since he despises Python so much, and
finds its syntax absurd, would even bother to make any sort of
implementation of it.

-- 
https://mail.python.org/mailman/listinfo/python-list

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Ned Deily]

Ned Deily  added the comment:


New changeset 6c472d3a1d334d4eeb4a25eba7bf3b01611bf667 by Miss Islington (bot) 
in branch '3.6':
[3.6] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline 
and tabs (GH-25924)
https://github.com/python/cpython/commit/6c472d3a1d334d4eeb4a25eba7bf3b01611bf667


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Re: Bloody rubbish

[Wayne Lodahl]

On 5/6/21 6:11 AM, Mr Flibble wrote:
> Python is slow and significant whitespace is patently absurd.
> 
> Bloody rubbish, it's all bloody rubbish.
> 
> Message ends.
> 
> /Flibble
> 
Machine language is so much simpler, and you can code with just a hexpad.
-- 
https://mail.python.org/mailman/listinfo/python-list

[issue43882] [security] urllib.parse should sanitize urls containing ASCII newline and tabs.

[Ned Deily]

Ned Deily  added the comment:


New changeset f4dac7ec55477a6c5d965e594e74bd6bda786903 by Miss Islington (bot) 
in branch '3.7':
[3.7] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline 
and tabs. (GH-25923)
https://github.com/python/cpython/commit/f4dac7ec55477a6c5d965e594e74bd6bda786903


--
nosy: +ned.deily

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue43972] Simple HTTP Request Handler in http.server does not set a content-length and does not close connections on 301s

[Stephen Rosen]

Stephen Rosen  added the comment:

Thanks for working with me to reproduce and understand the issue. I'm a little 
surprised that with the sample which sets the protocol version you're still not 
seeing the issue.

If I create a directory tree, e.g.

repro
├── foo/
└── server.py

where `server.py` is the sample I gave, and run `server.py`, I find that `curl 
localhost:8000/foo` hangs. `curl -v` includes a message as part of its output 
which states that it's waiting for the connection to close.

Full verbose output:
```
$ curl localhost:8000/foo -v
*   Trying 127.0.0.1:8000...
* TCP_NODELAY set
* Connected to localhost (127.0.0.1) port 8000 (#0)
> GET /foo HTTP/1.1
> Host: localhost:8000
> User-Agent: curl/7.68.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Server: SimpleHTTP/0.6 Python/3.8.5
< Date: Thu, 06 May 2021 15:53:13 GMT
< Location: /foo/
* no chunk, no close, no size. Assume close to signal end
<
^C
```


This holds over a few python versions: 3.6.12, 3.8.5, and 3.9.1 . That's 
probably a good enough sample since the relevant code hasn't changed in the 
stdlib.

It's doubtful that the exact version of curl matters for this. I can also see 
the issue with Firefox opening `localhost:8000/foo`. It hangs without 
processing the redirect.


Running the sample I gave, you're seeing curl exit cleanly? I wonder, with 
verbose output, maybe there's some useful message that will tell us why it's 
exiting. Does it not print the message, "no chunk, no close, no size. Assume 
close to signal end" ?


> Note: the existing behavior is 10+ year old and don't want to introduce 
> changes if it is not a bug.

I completely understand this stance. I believe it is a bug, but that it's rare 
enough that hasn't been filed or resolved, in spite of its age.

Some browsers (e.g. Chrome) process redirects without waiting for a payload, so 
they would mask the issue. Plus, it only shows up when the protocol_version is 
set.

I had a script at work with this issue for over a year without anyone running 
into the hangs. A coworker who prefers Firefox noticed the issue only recently, 
and I traced that back to this behavior.
So even in my case, I didn't stumble across this issue until we'd been using 
the same test script with the bug in it for a long time.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com