[issue5753] CVE-2008-5983 python: untrusted python modules search path

Martin v. Löwis added the comment: I wonder why all these applications call PySys_SetArgv at all if they don't have any arguments to set. In the gedit case, I just removed the call from gedit, and it seems to work fine (sys.argv will be an empty list). -- __

[issue4709] Mingw-w64 and python on windows x64

Cournapeau David added the comment: Ok, it looks like following gcc 4.4.0 release, there is an installer for the whole toolchain: http://www.equation.com/servlet/equation.cmd?call=fortran This installs gcc (C+Fortran+C++ compilers, the download is ~ 40 Mb), and it can be used from the command

[issue5799] Change ntpath functions to implicitly support UNC paths

Larry Hastings added the comment: I tested your patch and it looks good to me. I didn't get the deprecation warning on ntpath.splitunc unless I disabled all warnings. -- ___ Python tracker

[issue5940] Wrong type check in check_library_list

Tarek Ziadé added the comment: fixed in r72379 Thanks David ! Notice that this bug exists in Python 3.0 too unfortunately. So I have applied the fix in the 3.0 release branch as well (r72380) -- status: open -> closed ___ Python tracker

[issue5941] customize_compiler broken

Changes by Tarek Ziadé : -- priority: -> critical ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.p

[issue5941] customize_compiler broken

Cournapeau David added the comment: The bug is also present in python 2.7a -- versions: +Python 2.7, Python 3.0 ___ Python tracker ___ ___

[issue4709] Mingw-w64 and python on windows x64

Martin v. Löwis added the comment: > The toolchain is difficult to build, but the patch is easy to review, it > just moves the MS_WIN64 outside the MS compiler specific part. If it > does not break the MS toolchain (the one used to build the official > python), I don't see the problem. As a pri

[issue1443504] locale.getpreferredencoding() dies when setlocale fails

Martin v. Löwis added the comment: It looks like a bug fix to me - so it would apply to all four active branches. -- status: pending -> open ___ Python tracker ___ ___

[issue5947] Deprecate CObject

Larry Hastings added the comment: It's 12:45am, and I've already learned my New Thing for the day. I didn't know about PendingDeprecationWarning. That's just exactly what CObject should throw. Attached is a new patch. The two CObject constructors now throw a PendingDeprecationWarning every t

[issue5799] Change ntpath functions to implicitly support UNC paths

Mark Hammond added the comment: Checked into the trunk as r72387 (after normalizing whitespace in ntpath.py after the precommit-hook failed). Thanks Larry and Eric! -- resolution: -> fixed status: open -> closed ___ Python tracker

[issue5933] fix gcc -Wextra warnings (compare signed/unsigned)

STINNER Victor added the comment: > For the second, I don't understand why you want to > compare the return result with RLIM_INFINITY: PyInt_AsLong > returns -1 to signal failure; is there some guarantee that > RLIM_INFINITY == -1 if it's defined? rlim_t is an unsigned type. The idea of sign_

[issue5933] fix gcc -Wextra warnings (compare signed/unsigned)

Changes by STINNER Victor : Removed file: http://bugs.python.org/file13884/sign_warning_resource.patch ___ Python tracker ___ ___ Python-bugs-l

[issue5933] fix gcc -Wextra warnings (compare signed/unsigned)

Changes by STINNER Victor : Removed file: http://bugs.python.org/file13883/sign_warning.patch ___ Python tracker ___ ___ Python-bugs-list maili

[issue5941] customize_compiler broken

Tarek Ziadé added the comment: what is your traceback ? I want to make sure I have the same in the test I built. Also, just before the traceback, can you tell me the exact command that is spawned in ccompiler.py line 1036. -- ___ Python tracker

[issue5941] customize_compiler broken

Cournapeau David added the comment: You can see the traceback in this recent email: http://mail.python.org/pipermail/python-list/2009-May/712106.html -- ___ Python tracker ___ _

[issue1443504] locale.getpreferredencoding() dies when setlocale fails

Jeroen Ruigrok van der Werven added the comment: Committed in r72381 and r72395. -- status: open -> closed ___ Python tracker ___ _

[issue5946] Fix spelling error in Capsule docs

Georg Brandl added the comment: Committed in r72396. -- resolution: -> fixed status: open -> closed ___ Python tracker ___ ___ Python

[issue5941] customize_compiler broken

Tarek Ziadé added the comment: Ok I am able to reproduce it. We can't change AR in the makefile, so I think the best way is to add like you said the -cr option in Python Makefile under a new variable, then use it in customize_compiler I'll ask on python-dev because I am new to the Makefile. A

[issue5947] Deprecate CObject

Georg Brandl added the comment: Applied in r72397. -- nosy: +georg.brandl resolution: -> accepted status: open -> closed ___ Python tracker ___ _

[issue5799] Change ntpath functions to implicitly support UNC paths

Eric Smith added the comment: Thanks for looking at this, Mark. If we could only assign issues to Python 3.2 and 3.3 to change the pending deprecation warning to a real one, and to remove the function entirely, we'd be all set! I'm always worried we'll forget these things. -- _

[issue1194378] sendmsg() and recvmsg() for C socket module

Changes by Guillaume Desmottes : -- nosy: +gdesmott ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://ma

[issue5322] Python 2.6 object.__new__ argument calling autodetection faulty

Changes by Stefan Ring : -- nosy: +Ringding ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.o

[issue5941] customize_compiler broken

Changes by Floris Bruynooghe : -- nosy: +flub ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python

[issue1209447] os.path.join() fails if 2nd arg is a UNC path

Hirokazu Yamamoto added the comment: Seems to be fixed in python3.1. See #5799. This is not backported for 2.x yet. (Or it won't happen) -- nosy: +ocean-city ___ Python tracker __

[issue5887] mmap.write_byte out of bounds - no error, position gets screwed up

Brian Mearns added the comment: Confirmed fixed in python 2.6.2 -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscrib

[issue5887] mmap.write_byte out of bounds - no error, position gets screwed up

Hirokazu Yamamoto added the comment: Thank you for response. I'll close this entry. -- resolution: -> out of date status: open -> closed ___ Python tracker ___ _

[issue5887] mmap.write_byte out of bounds - no error, position gets screwed up

Brian Mearns added the comment: On Wed, May 6, 2009 at 8:51 AM, Hirokazu Yamamoto wrote: > > Hirokazu Yamamoto added the comment: > > Thank you for response. I'll close this entry. > > -- > resolution:  -> out of date > status: open -> closed > Ok, thanks. I wasn't sure if I should cl

[issue3382] Make '%F' and float.__format__('F') convert results to upper case.

Eric Smith added the comment: Checked in to py3k in 72398. I'm reconsidering whether to make this change in 2.7. I might make the change there, I'll have to check on the impacts. -- ___ Python tracker _

[issue5948] setlocale regression

New submission from Kerfred : There is a regression bug between Python 2.5 and Python 2.6. With Python 2.5, the following code works: import locale locale.setlocale(locale.LC_ALL, 'fr') Whereas with Python 2.6, I get this message: Traceback (most recent call last): File "", line 1, in File

[issue5752] xml.dom.minidom does not handle newline characters in attribute values

Tomalak added the comment: @Francesco Sechi: Would it not just require a minimal change to the _write_data() method? Something along the lines of (sorry, no Python expert, maybe I am way off): def _write_data(writer, data, is_attrib=False): "Writes datachars to writer." if is_attrib:

[issue5752] xml.dom.minidom does not handle newline characters in attribute values

Tomalak added the comment: Of course it should be: def _write_data(writer, data, is_attrib=False): "Writes datachars to writer." data = data.replace("&", "&").replace("<", "<") data = data.replace("\"", """).replace(">", ">") if is_attrib: data = data.replace("\r", " ")

[issue5948] setlocale regression

Jeroen Ruigrok van der Werven added the comment: I can verify this on Vista. 2.5 gives: >>> from locale import setlocale, LC_ALL >>> setlocale(LC_ALL, "fr") 'French_France.1252' Whereas 2.6 fails. There is no difference between 2.5's and 2.6's PyLocale_setlocale() from what I can see in Modu

[issue3739] unicode-internal encoder reports wrong length

Walter Dörwald added the comment: Checked in: r72404,72406 (trunk) r72408 (py3k) As IMHO this is somewhat between a feature and a bugfix, I didn't check it into release26-maint and release30-maint. -- resolution: -> fixed status: open -> closed ___

[issue3739] unicode-internal encoder reports wrong length

STINNER Victor added the comment: > I didn't check it into release26-maint and release30-maint. I agree and anyway this encoder is not really important (it looks to be unused...). Thanks for the commit. -- ___ Python tracker

[issue5949] IMAP4_SSL spin because of SSLSocket.suppress_ragged_eofs

New submission from Kevin Watters : I cannot reproduce this locally yet, but I have several bug reports from users showing that IMAP4_SSL connections can get stuck in an infinite loop during logout() File "imaplib.pyo", line 529, in logout File "imaplib.pyo", line 1059, in _simple_command

[issue5948] setlocale regression

Changes by Georg Brandl : -- assignee: -> loewis nosy: +loewis ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue5933] fix gcc -Wextra warnings (compare signed/unsigned)

Georg Brandl added the comment: Yes, that looks better. PS: Do not remove applied patches. -- nosy: +georg.brandl ___ Python tracker ___

[issue5933] fix gcc -Wextra warnings (compare signed/unsigned)

STINNER Victor added the comment: > PS: Do not remove applied patches. Oh ok, sorry. -- ___ Python tracker ___ ___ Python-bugs-list m

[issue5950] zimport doesn't work with zipfile containing comments

New submission from Dmitry : Synopsys: zimport not able to import a module from zipfile if zipfile contains comment. Versions: This is Zip 2.32 (June 19th 2006), by Info-ZIP Python 2.5.2 or 2.6.2 Steps to reproduce: create a module, create an app that imports this module. zip the module, make su

[issue5948] setlocale regression

Hirokazu Yamamoto added the comment: Did you build python from source? Or did you download official binary distribution? If latter, Python2.5 was built with VC7, and Python2.6 is built with VC9. Probably difference of behavior comes from difference of version of msvcrt. I ran following codes fr

[issue5948] setlocale regression

Changes by Hirokazu Yamamoto : -- assignee: -> loewis ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://ma

[issue5948] setlocale regression

Jeroen Ruigrok van der Werven added the comment: My tests were with official distributions. Yamamoto-san, thank you for your testing. I was thinking it might have been something to do with changed semantics, but I am happy you saved me the time from having to compile. Looking at the documentat

[issue5753] CVE-2008-5983 python: untrusted python modules search path

Glyph Lefkowitz added the comment: It suggests to me that somewhere there's some documentation, or an example, that says "this is the right way to embed python, call this function". If the right thing to do is to just not call the function at all, we need to get that knowledge out there into th

[issue3992] removed custom log from distutils

Antonio Cavallo added the comment: This patch changes the log.py in order to make use of the logging infrastructure. There are few point tough worth of mention. There're two separate stages when log.py is used: a) during the python interpreter build (let's call it bootstrap) b) for every

[issue5847] IDLE/Win Installer: drop -n switch for 2.7/3.1; install 3.1 as idle3

Benjamin Peterson added the comment: Closing since this problem seems to be fixed. -- resolution: -> fixed status: open -> closed ___ Python tracker ___

[issue3992] removed custom log from distutils

Tarek Ziadé added the comment: After more thinking, I think we can use a better strategy: - adding a deprecate warning inside the log module and keep the code as it is - set in the __init__ module the regular logger - change every call in distutils from the old log system to the new now f

[issue5948] setlocale regression

Changes by Martin v. Löwis : -- assignee: loewis -> ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail

[issue5753] CVE-2008-5983 python: untrusted python modules search path

Martin v. Löwis added the comment: > It suggests to me that somewhere there's some documentation, or an > example, that says "this is the right way to embed python, call this > function". That may be an explanation. However, it would be immensely useful to know for sure, from the original autho

[issue5753] CVE-2008-5983 python: untrusted python modules search path

Glyph Lefkowitz added the comment: > IOW, I *really* want to understand what's happening before fixing > it. This is a security issue, after all. Agreed. Does anyone currently subscribed to this ticket know the author of such an application? It would be very helpful to have them involved in t

[issue5948] setlocale regression

Georg Brandl added the comment: Closing as "won't fix", then. -- nosy: +georg.brandl resolution: -> wont fix status: open -> closed ___ Python tracker ___ __

[issue5753] CVE-2008-5983 python: untrusted python modules search path

Gregory P. Smith added the comment: gedit does it here: http://git.gnome.org/cgit/gedit/tree/plugin-loaders/python/gedit-plugin- loader-python.c#n542 I've emailed the file's author (Jesse) out of the blue to see if he knows why PySys_SetArgv() was called. --

[issue5752] xml.dom.minidom does not handle newline characters in attribute values

Francesco Sechi added the comment: Don't worry, I'm a newer too. No, your solution does not work, because the method you refer (_write_data) is called by the toxml() function, but the newline is replaced with a whitespace by the parsestring() function. The parsestring function, as I already said

[issue5762] AttributeError: 'NoneType' object has no attribute 'replace'

Changes by Francesco Sechi : -- nosy: +sechi_francesco ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://ma

[issue5762] AttributeError: 'NoneType' object has no attribute 'replace'

Francesco Sechi added the comment: I'm not able to reproduce the issue. Why don't you submit the unit test that generates the problem? Thanks -- ___ Python tracker ___ __

[issue5951] email.message : get_payload args's documentation is confusing

New submission from jal : >From documentation : http://docs.python.org/library/email.message.html?highlight=email#email.message.Message.get_payload get_payload([i[, decode]]) "With optional argument i,[..] If the payload is a string (i.e. is_multipart() is False) and i is given, a TypeError is

[issue5951] email.message : get_payload args's documentation is confusing

Changes by jal : -- versions: +Python 2.4, Python 2.5, Python 2.7, Python 3.0, Python 3.1 ___ Python tracker ___ ___ Python-bugs-list m

[issue3992] removed custom log from distutils

Antonio Cavallo added the comment: Hi Tarek, I agree that a change in that module is "risky" but a warning won't solve the main problem in the long run: anyway I'm not able to comment about the best strategy. Now the access problem: If an import logging is put into the log.py the (python) bu

[issue3992] removed custom log from distutils

Changes by Antonio Cavallo : Added file: http://bugs.python.org/file13908/issue3992.remove-custom-log.diff ___ Python tracker ___ ___ Python-bu

[issue3992] removed custom log from distutils

Changes by Antonio Cavallo : Removed file: http://bugs.python.org/file13906/issue3992.remove-custom-log.diff ___ Python tracker ___ ___ Python-

[issue5951] email.message : get_payload args's documentation is confusing

R. David Murray added the comment: The answer is that you do msg.get_payload(decode=True). The doc needs to be changed over to use keyword argument specification syntax, which I think would make that obvious. -- nosy: +r.david.murray versions: -Python 2.4, Python 2.5

[issue5952] AttributeError exception in urllib.urlopen

New submission from Sergey Prigogin : File "/usr/grte/v1/piii-linux/lib/python2.4/urllib.py", line 82, in urlopen return opener.open(url) File "/usr/grte/v1/piii-linux/lib/python2.4/urllib.py", line 190, in open return getattr(self, name)(url) File "/usr/grte/v1/piii-linux/lib/python2.4

[issue5953] Add to "whats new": range(n) != range(n)

New submission from Mitchell Model : I just discovered to my (deep) surprise that range(n) != range(n) I think that's worth including in the what's new document. I realize that the document essentially says that in python 3 range behaves the way xrange did in python 2 and that ranges have

[issue5884] pydoc to return error status code

Mike Miller added the comment: Ahh, I see ... I didn't explain my issue with much depth in haste. I don't usually run the test suite when I am in the process of updating code or docs, only when I'm done, then I check it in. So I was updating the docs and running pydoc with a local batch file a

[issue5949] IMAP4_SSL spin because of SSLSocket.suppress_ragged_eofs

Rod Morehead added the comment: Isn't the call to read(1) blocking in this case? If so the only reason it should spin would be if it returned an empty string representing EOF. Couldn't we just add a check for an empty string and, if found, raise an EOF exception? -- nosy: +rmore __