[issue17235] "make sharedinstall" ignores ./configure settings

2013-02-20 Thread Ned Deily
Ned Deily added the comment: Sorry, I'm unable to reproduce your results and they look rather suspicious. Keep in mind that the Python build uses its copy of Distutils to build and install the interpreter's shared extension modules, like _ctypes.so. My guess is that your "make install" is be

[issue6138] './configure; make install' fails in setup.py step if .pydistutils.cfg specifies 'home'

2013-02-20 Thread Ned Deily
Ned Deily added the comment: Let's consolidate these. -- nosy: +ned.deily resolution: -> duplicate stage: -> committed/rejected status: open -> closed superseder: -> during Python installation, setup.py should not use .pydistutils.cfg ___ Python t

[issue4655] during Python installation, setup.py should not use .pydistutils.cfg

2013-02-20 Thread Ned Deily
Ned Deily added the comment: rdm notes in duplicate Issue6138: There is a bug here, of some sort. Either the .pydistutils.cfg file's install clause should override the default --prefix somehow, or the error message should indicate where the setting for 'home' and '--prefix' came from to enable

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
New submission from Firat Ozgul: lower() method of strings gives different output for 'Latin Capital Letter I with Dot Above' on Python 3.2 and Python 3.3. On Python 3.2 (Windows XP): >>> "\u0130".lower() 'i' #this is correct On Python 3.3 (Windows XP): >>> "\u0130".lower() 'i\u0307' #this

[issue17235] "make sharedinstall" ignores ./configure settings

2013-02-20 Thread Michael Kuhn
Michael Kuhn added the comment: Thanks a lot Ned: you're right, the unexpected path was indeed set in ~/.pydistutils.cfg. So I agree with what has been written in the other issues, that the installation should detect the clash between the command line configuration and the configuration file t

[issue17239] XML vulnerabilities in Python

2013-02-20 Thread Dirkjan Ochtman
Changes by Dirkjan Ochtman : -- nosy: +djc ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.o

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread R. David Murray
R. David Murray added the comment: I thought this would just be a difference in the unicode database, but that appears not to be the case. Ezio, this is related to the infamous Turkic dotless lower case i problem (see, eg, http://mail.python.org/pipermail/python-bugs-list/2005-October/030686.

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Firat Ozgul added the comment: In Python, things like lowercasing-uppercasing and sorting were always problematic with regard to Turkish language. For instance, whatever the locale is, you cannot lowercase the word 'KADIN' (woman) in Turkish correctly:: >>> "KADIN".lower() 'kadin' ..

[issue17253] stdin.readline behaviour different between IDLE and the console

2013-02-20 Thread Jason R Briggs
New submission from Jason R Briggs: The sys.stdin.readline function takes a limit parameter, which limits the number of characters read. If you try using that parameter in IDLE, you get the following error: Traceback (most recent call last): File "", line 1, in sys.stdin.readline(13) Ty

[issue17254] add thai encoding aliases to encodings.aliases

2013-02-20 Thread albertjan
New submission from albertjan: This is almost identical to: http://bugs.python.org/issue854511 However, tis602, which is mentioned in the orginal bug report, is not an alias to cp874. Therefore, I propose the following: import encodings aliases = encodings.aliases.aliases more_aliases = {'ibm8

[issue17253] stdin.readline behaviour different between IDLE and the console

2013-02-20 Thread Jason R Briggs
Jason R Briggs added the comment: Note, that change I quoted would be in idlelib/PyShell.py -- ___ Python tracker ___ ___ Python-bugs-

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread R. David Murray
R. David Murray added the comment: Right, and the unicode consortium says that that weird thing 3.3 is doing is the "canonical" lowercasing, and this is the case exactly because in 3.3 "\u0130".lower().upper() == "\u0130". Which I why I asked Ezio if we ever came up with a way to do lower/upp

[issue15004] add weakref support to types.SimpleNamespace

2013-02-20 Thread Antoine Pitrou
Antoine Pitrou added the comment: Good, except that you have to add a gc.collect() call for the non-refcounted implementations. -- ___ Python tracker ___ ___

[issue17254] add thai encoding aliases to encodings.aliases

2013-02-20 Thread Marc-Andre Lemburg
Marc-Andre Lemburg added the comment: On 20.02.2013 12:48, albertjan wrote: > > New submission from albertjan: > > This is almost identical to: http://bugs.python.org/issue854511 > However, tis602, which is mentioned in the orginal bug report, is not an > alias to cp874. Therefore, I propose t

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Firat Ozgul added the comment: r.david.murray: '(...) because in 3.3 "\u0130".lower().upper() == "\u0130"' Do you mean in Python 3.3 "\u0130".lower() returns "\u0130"? If you are saying so, this is not the case, because in Python 3.3:: >>> '\u0130'.lower() 'i\u0307' -- _

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Antoine Pitrou
Antoine Pitrou added the comment: Yes, I think 3.3 is correct here. I think it was Benjamin who fixed/improved the behaviour of casing methods. Compare 3.3: >>> "ß".upper() 'SS' with 3.2: >>> "ß".upper() 'ß' Also, 3.2 loses information: >>> "KİTAP".lower().upper() 'KITAP' >>> ascii("KİTAP".

[issue17255] test_any and test_all should validate short-circuiting behaviour

2013-02-20 Thread wim glenn
New submission from wim glenn: The docs http://docs.python.org/2/library/functions.html#all provide some equivalent code for all builtin (and similarly for any): def all(iterable): for element in iterable: if not element: return False return True The behaviour is cl

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Firat Ozgul added the comment: Don't you think that there is a problem here? >>> "KİTAP".lower().upper() 'KİTAP' >>> ascii("KİTAP".lower().upper()) "'KI\\u0307TAP'" "İ" is not "i\u0307". That's a different letter. "i\u0307"is 'i with combining dot above'. However, "İ" is "\u0130" (Latin Capita

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Firat Ozgul added the comment: ascii("KİTAP".lower().upper()) should return "K\u0130TAP". Yes, Python 3.2 loses information, but Python 3.3 inserts faulty information, which, I think, is much worse than losing information. -- ___ Python tracker

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread R. David Murray
R. David Murray added the comment: Ah, you are right, I did not decode it to see what the actual characters were. That does contradict what I said, but I'm way out of my depth on unicode at this point, so we'll have to wait for someone more expert to weigh in. -- _

[issue17253] stdin.readline behaviour different between IDLE and the console

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Already fixed in issue9290. -- nosy: +serhiy.storchaka resolution: -> out of date stage: -> committed/rejected status: open -> closed ___ Python tracker ___

[issue17164] MozillaCookieJar does not handle session cookies

2013-02-20 Thread Piotr Dobrogost
Piotr Dobrogost added the comment: I could try to write a patch with some help if there was any chance it might be accepted. Where do I start? -- ___ Python tracker ___

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Changes by Firat Ozgul : -- resolution: invalid -> status: closed -> open ___ Python tracker ___ ___ Python-bugs-list mailing list Un

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Firat Ozgul added the comment: Excerpt from http://www.unicode.org/Public/UNIDATA/SpecialCasing.txt # Turkish and Azeri # I and i-dotless; I-dot and i are case pairs in Turkish and Azeri # The following rules handle those cases. 0130; 0069; 0130; 0130; tr; # LATIN CAPITAL LETTER I WITH DOT ABO

[issue15004] add weakref support to types.SimpleNamespace

2013-02-20 Thread Richard Oudkerk
Richard Oudkerk added the comment: > Good, except that you have to add a gc.collect() call for the > non-refcounted implementations. Better to use test.support.gc_collect(). -- nosy: +sbt ___ Python tracker _

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Benjamin Peterson
Benjamin Peterson added the comment: Notice the lines you pulled have "tr" and "az" at the end of them meaning they only apply for Turkish and Azeri. Since the lower() method has no idea whether the user intends to be in a Turkish or Azeri locale or not, we just have to use the generic lowerin

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Firat Ozgul added the comment: Even if you set Turkish locale, the output is still "generic". Furthermore, does "canonical equivalence" really dictate that 'Latin Capital Letter I with Dot Above' should be mapped to 'I With Combining Dot Above' in lowercase? Note: 'Uppercase Dotted i' only ex

[issue16245] Update html.entities.html5 dictionary and parseentities.py

2013-02-20 Thread Ramchandra Apte
Ramchandra Apte added the comment: Shouldn't this be deferred blocker? -- nosy: +Ramchandra Apte ___ Python tracker ___ ___ Python-bug

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Ramchandra Apte
Ramchandra Apte added the comment: I suppose this should be closed. -- status: open -> closed ___ Python tracker ___ ___ Python-bugs-l

[issue886488] popen2 on Windows does not check _fdopen return value

2013-02-20 Thread Ramchandra Apte
Ramchandra Apte added the comment: I think so. -- nosy: +Ramchandra Apte ___ Python tracker ___ ___ Python-bugs-list mailing list Uns

[issue1398781] Example in section 5.3 "Pure Embedding" doesn't work.

2013-02-20 Thread Ramchandra Apte
Ramchandra Apte added the comment: Is this still valid? -- nosy: +Ramchandra Apte ___ Python tracker ___ ___ Python-bugs-list mailin

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Firat Ozgul added the comment: Whatever the behavior of Python is in 'generic' terms, I believe, we should be able to do locale-dependent uppercasing-lowercasing, which we cannot do at the moment. -- ___ Python tracker

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Christian Heimes
Christian Heimes added the comment: The bug hasn't been closed deliberately. We need to announce the security fix and possibly acquire a CVE, too. -- status: closed -> open ___ Python tracker _

[issue17254] add thai encoding aliases to encodings.aliases

2013-02-20 Thread albertjan
albertjan added the comment: Hi,   I found this report that includes your name: http://mail.python.org/pipermail/python-bugs-list/2004-August/024564.html   Other relevant websites: http://en.wikipedia.org/wiki/ISO/IEC_8859-11  # is wikipedia 'proof'? http://code.ohloh.net/file?fid=dhX2dJrRWGISzQA

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread R. David Murray
R. David Murray added the comment: Yes, earlier in that file is the generic translation: # Preserve canonical equivalence for I with dot. Turkic is handled below. 0130; 0069 0307; 0130; 0130; # LATIN CAPITAL LETTER I WITH DOT ABOVE You see that Python is following the standard, here. Agreed ab

[issue17256] code example should be highlighted

2013-02-20 Thread Ramchandra Apte
New submission from Ramchandra Apte: in http://docs.python.org/2/extending/embedding.html#linking-requirements the code example isn't highlighted -- assignee: docs@python components: Documentation messages: 182515 nosy: Ramchandra Apte, docs@python priority: normal severity: normal stat

[issue17256] code example should be highlighted

2013-02-20 Thread Ramchandra Apte
Changes by Ramchandra Apte : -- versions: +Python 2.7 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://ma

[issue17256] code example should be highlighted

2013-02-20 Thread Ramchandra Apte
Ramchandra Apte added the comment: Also in the section above: http://docs.python.org/2/extending/embedding.html#extending-embedded-python , the two code examples should be highlighted. -- ___ Python tracker _

[issue17256] code example in C API docsshould be highlighted

2013-02-20 Thread Ramchandra Apte
Changes by Ramchandra Apte : -- title: code example should be highlighted -> code example in C API docsshould be highlighted ___ Python tracker ___ _

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Firat Ozgul
Firat Ozgul added the comment: Apparently, what Python did wrong in the past was somewhat good for Turkish Python developers! This means Turkish developers now have one more problem to solve. Bad. -- ___ Python tracker

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Antoine Pitrou
Antoine Pitrou added the comment: > "İ" is not "i\u0307". That's a different letter. "i\u0307"is 'i with > combining dot above'. However, "İ" is "\u0130" (Latin Capital Letter > I with Dot Above). Did you actually read my message? You can reconcile the two using unicodedata.normalize(). ---

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Benjamin Peterson
Benjamin Peterson added the comment: The "locale" module does not affect Unicode operations. That's C locale; I'm talking about concept of Unicode locale, which Python doesn't currently know anything about. I agree it would be useful to customize the locale of various unicode operations. That

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Marc-Andre Lemburg
Marc-Andre Lemburg added the comment: On 20.02.2013 15:58, Benjamin Peterson wrote: > > Benjamin Peterson added the comment: > > The "locale" module does not affect Unicode operations. That's C locale; I'm > talking about concept of Unicode locale, which Python doesn't currently know > anythi

[issue17252] Latin Capital Letter I with Dot Above

2013-02-20 Thread Christian Heimes
Christian Heimes added the comment: In the meantime you can use PyICU https://pypi.python.org/pypi/PyICU for locale aware transformations: >>> from icu import UnicodeString, Locale >>> tr = Locale("TR") >>> s = UnicodeString("KADIN") >>> print(unicode(s.toLower(tr))) kadın >>> unicode(s.toLower

[issue17254] add thai encoding aliases to encodings.aliases

2013-02-20 Thread Marc-Andre Lemburg
Marc-Andre Lemburg added the comment: On 20.02.2013 15:40, albertjan wrote: > > albertjan added the comment: > > Hi, > > I found this report that includes your name: > http://mail.python.org/pipermail/python-bugs-list/2004-August/024564.html > > Other relevant websites: > http://en.wikipedi

[issue13772] listdir() doesn't work with non-trivial symlinks

2013-02-20 Thread Jason R. Coombs
Jason R. Coombs added the comment: I've started work on restoring the directory detection in my bitbucket repo (https://bitbucket.org/jaraco/cpython-issue13772). I have added a regression test to capture the basic failure (where the link is not created in the current working directory) as well

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Zachary Ware
Zachary Ware added the comment: I believe we're also waiting on input from Barry about whether to apply the patch to 2.6. -- ___ Python tracker ___ __

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Barry A. Warsaw
Barry A. Warsaw added the comment: Does the 2.x patch apply cleanly to 2.6? If so, then I think it should be applied (though I'd like to review it first). 2.6 is still under security maintenance until October 2013. I'm thinking we'll probably do one last security release around that time.

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Zachary Ware
Zachary Ware added the comment: > Does the 2.x patch apply cleanly to 2.6? It should, if I remember correctly, though I haven't checked since uploading it. I believe there were actually very few or no changes to the file the patch is for between 2.6 and 2.7. --

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Barry A. Warsaw
Changes by Barry A. Warsaw : -- versions: +Python 2.6 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://ma

[issue17254] add thai encoding aliases to encodings.aliases

2013-02-20 Thread albertjan
albertjan added the comment: > Sent: Wednesday, February 20, 2013 4:25 PM > Subject: [issue17254] add thai encoding aliases to encodings.aliases > > Thanks. > > Something is wrong with your request, though: > > * we already have an iso8859_11 code, so aliasing it to some >   other name is not

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Barry A. Warsaw
Barry A. Warsaw added the comment: Release blocking for 2.6.9 (oh how I wish we could release block for specific Python versions). -- nosy: +georg.brandl, larry priority: normal -> release blocker ___ Python tracker

[issue8930] messed up formatting after reindenting

2013-02-20 Thread R. David Murray
R. David Murray added the comment: Looks like there's no reason for this issue to still be open. If I'm wrong one of the principles can reopen it ;) -- nosy: +r.david.murray stage: -> committed/rejected status: open -> closed ___ Python tracker

[issue17237] m68k aligns on 16bit boundaries.

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: mirabilos, if you are motivated enough, do the following. Compile two Python executables - one with deleted assert, and second with deleted a block between "#if SIZEOF_LONG <= SIZEOF_VOID_P" and "#endif". Run following microbenchmarks for both executables:

[issue17241] Python-2.3.5.exe file possibly corrupt

2013-02-20 Thread Stefan Krah
Changes by Stefan Krah : -- resolution: -> works for me stage: -> committed/rejected status: pending -> closed type: -> behavior ___ Python tracker ___ ___

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Antoine Pitrou
Antoine Pitrou added the comment: > Barry A. Warsaw added the comment: > > Does the 2.x patch apply cleanly to 2.6? Perhaps it's your job as a release manager to check that ;-P -- ___ Python tracker _

[issue15301] os.chown: OverflowError: Python int too large to convert to C long

2013-02-20 Thread Roundup Robot
Roundup Robot added the comment: New changeset 9b37e53838eb by Serhiy Storchaka in branch '2.7': Issue #15301: Enhance os.*chown() testing. Based on patch by Larry Hastings. http://hg.python.org/cpython/rev/9b37e53838eb New changeset a0baf5347cd1 by Serhiy Storchaka in branch '3.2': Issue #1530

[issue17248] test_posix chown -1, 0 tests fail if user has group root

2013-02-20 Thread Roundup Robot
Roundup Robot added the comment: New changeset 0383a54347ea by Serhiy Storchaka in branch '2.7': Issue #17248: Fix os.*chown() testing when user has group root. http://hg.python.org/cpython/rev/0383a54347ea New changeset a49bbaadce67 by Serhiy Storchaka in branch '3.2': Issue #17248: Fix os.*cho

[issue17257] re module shows unexpected non-greedy behavior when using groups

2013-02-20 Thread Hendrik Lemelson
New submission from Hendrik Lemelson: When using the Python 2.7.3 re module, it shows a strange behavior upon the use of quantifiers together with groups: >>> re.search('(a*)', 'ct').groups() ('',) >>> re.search('(a+)', 'ct').groups() ('',) >>> re.search('(a{0,5})', 'ct').groups

[issue17248] test_posix chown -1, 0 tests fail if user has group root

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Fixed. -- assignee: -> serhiy.storchaka resolution: -> fixed stage: needs patch -> committed/rejected status: open -> closed ___ Python tracker

[issue6975] symlinks incorrectly resolved on POSIX platforms

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: I have no access to Windows and can't design Windows tests. -- ___ Python tracker ___ ___ Python-bu

[issue17257] re module shows unexpected non-greedy behavior when using groups

2013-02-20 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- versions: +Python 3.2, Python 3.3, Python 3.4 ___ Python tracker ___ ___ Python-bugs-list mailing lis

[issue17248] test_posix chown -1, 0 tests fail if user has group root

2013-02-20 Thread R. David Murray
R. David Murray added the comment: Unfortunately, no it isn't. root isn't my primary group, it just one of the groups I belong to. -- status: closed -> open ___ Python tracker _

[issue17257] re module shows unexpected non-greedy behavior when using groups

2013-02-20 Thread Tim Peters
Tim Peters added the comment: This is how it's supposed to work: Python's re matches at the leftmost position possible, and _then_ matches the longest possible substring at that position. When a regexp _can_ match 0 characters, it will match starting at index 0. So, e.g., >>> re.search('(a

[issue6975] symlinks incorrectly resolved on POSIX platforms

2013-02-20 Thread Arfrever Frehtes Taifersar Arahesis
Arfrever Frehtes Taifersar Arahesis added the comment: Use os.path.sep and os.path.sep.encode() instead of hardcoding "/" and b"/". -- ___ Python tracker ___ _

[issue17217] Fix test discovery for test_format.py on Windows

2013-02-20 Thread Ezio Melotti
Ezio Melotti added the comment: In order to fix test discovery on Windows the attached patch should be enough. There are two somewhat unrelated issues though: 1) moving replace_stdout to test.support (and possibly turn it into a context manager/decorator); 2) use unittest verbosity to control t

[issue16954] Add docstrings for ElementTree module

2013-02-20 Thread Ezio Melotti
Ezio Melotti added the comment: I left a few comments on rietveld. In the rst docs the markup used for arguments is *arg*, and this is sometimes reflected in docstrings too. We might want to do this here too, instead of using 'arg' (using 'attr' for attributes it's fine though). > maybe docs

[issue13124] Add "Running a Build Slave" page to the devguide

2013-02-20 Thread Ezio Melotti
Ezio Melotti added the comment: > Before I take any time to update the patch, does anyone object > to the location or intent of the changes? Adding a new page to the devguide seems OK to me. It makes the devguide bigger, but it can easily be ignored by developers/contributors if they are not

[issue17256] code example in C API docsshould be highlighted

2013-02-20 Thread Chris Jerdonek
Chris Jerdonek added the comment: Looks like it's because highlightlang:: c is at the top. -- nosy: +chris.jerdonek ___ Python tracker ___ ___

[issue17256] code example in C API docsshould be highlighted

2013-02-20 Thread Ezio Melotti
Changes by Ezio Melotti : -- nosy: +ezio.melotti stage: -> needs patch type: -> enhancement ___ Python tracker ___ ___ Python-bugs-l

[issue17237] m68k aligns on 16bit boundaries.

2013-02-20 Thread mirabilos
mirabilos added the comment: Serhiy Storchaka dixit: >mirabilos, if you are motivated enough, do the following. Compile two >Python executables - one with deleted assert, and second with deleted >a block between "#if SIZEOF_LONG <= SIZEOF_VOID_P" and "#endif". Run >following microbenchmarks for

[issue16893] Create IDLE help.txt from Doc/library/idle.rst

2013-02-20 Thread Zachary Ware
Zachary Ware added the comment: Here's a new version of the patch, with the fixes that Ned pointed out. I also tried to address concerns about lost information; menu divisions have been added to Doc/library/idle.rst, along with the blurb about running without a subprocess being deprecated. Al

[issue16893] Create IDLE help.txt from Doc/library/idle.rst

2013-02-20 Thread Zachary Ware
Changes by Zachary Ware : Removed file: http://bugs.python.org/file28725/issue16893.diff ___ Python tracker ___ ___ Python-bugs-list mailing l

[issue17258] multiprocessing.connection challenge implicitly uses MD5

2013-02-20 Thread Dave Malcolm
New submission from Dave Malcolm: Within multiprocessing.connection, deliver_challenge() and answer_challenge() use hmac for a challenge/response. hmac implicitly defaults to using MD5. MD5 should no longer be used for security purposes. See e.g. http://www.kb.cert.org/vuls/id/836068 This fa

[issue17249] reap threads in test_capi

2013-02-20 Thread R. David Murray
R. David Murray added the comment: Looks like a straightforward translation to me. There's no obvious reason not to move it to being a real test, which means it would sure be nice if we knew why it was left in test_main. -- nosy: +r.david.murray __

[issue6975] symlinks incorrectly resolved on POSIX platforms

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: > Use os.path.sep and os.path.sep.encode() instead of hardcoding "/" and > b"/". Some separators will be '\\' (if they are derived from OS functions, i.e. getcwd), and some will be '/' (if they are generated by posixpath). I do not have the ability to resear

[issue17258] multiprocessing.connection challenge implicitly uses MD5

2013-02-20 Thread Christian Heimes
Christian Heimes added the comment: The statement "MD5 should no longer be used for security purposes" is not entirely correct. MD5 should no longer be used as cryptographic hash function for signatures. However HMAC-MD5 is a different story. >From https://tools.ietf.org/html/rfc6151 The a

[issue17237] m68k aligns on 16bit boundaries.

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: > Which tree should I build? A release (if so, which)? Or > some CVS branch? It doesn't matter. > Do note we clock at roughly 1000 pystones for the fastest > machines… yes 1000 not 1. It doesn't matter. Only relative values have a meaning. What is faster

[issue17237] m68k aligns on 16bit boundaries.

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: And of course run the tests on non-debug builds. -- ___ Python tracker ___ ___ Python-bugs-list ma

[issue17258] multiprocessing.connection challenge implicitly uses MD5

2013-02-20 Thread Richard Oudkerk
Richard Oudkerk added the comment: Banning md5 as a matter of policy may be perfectly sensible. However, I think the way multiprocessing uses hmac authentication is *not* affected by the collision attacks the advisory talks about. These depend on the attacker being able to determine for himse

[issue17259] locale.format() rounding is not reliable for floats

2013-02-20 Thread Francis Nimick
New submission from Francis Nimick: Locale.format() doesn't work correctly with floating point numbers. locale.format('%.0f', 5.5) -> 6 locale.format('%.0f', 6.5) -> 6 locale.format('%.0f', 7.5) -> 8 locale.format('%.0f', 8.5) -> 8 It seems that if the number before the decimal point is even, i

[issue17259] locale.format() rounding is not reliable for floats

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: http://docs.python.org/library/functions.html#round -- nosy: +serhiy.storchaka ___ Python tracker ___

[issue17259] locale.format() rounding is not reliable for floats

2013-02-20 Thread Francis Nimick
Francis Nimick added the comment: I did end up using round - does that mean the locale.format() behavior is correct? It's not specified anywhere in the doc that I can find. -- ___ Python tracker _

[issue17248] test_posix chown -1, 0 tests fail if user has group root

2013-02-20 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: What about this patch? -- keywords: +patch Added file: http://bugs.python.org/file29135/test_posix_chown_root_group.patch ___ Python tracker _

[issue17248] test_posix chown -1, 0 tests fail if user has group root

2013-02-20 Thread R. David Murray
R. David Murray added the comment: That works. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.p

[issue17228] Building without PYMALLOC fails

2013-02-20 Thread Roundup Robot
Roundup Robot added the comment: New changeset 470350fd2831 by Benjamin Peterson in branch '3.3': fix building without pymalloc (closes #17228) http://hg.python.org/cpython/rev/470350fd2831 New changeset 67fa0643751d by Benjamin Peterson in branch '2.7': fix building without pymalloc (closes #17

[issue17259] locale.format() rounding is not reliable for floats

2013-02-20 Thread R. David Murray
R. David Murray added the comment: Perhaps Serhiy meant to direct your attention to the "note" in the round docs. Floating point is tricky. In Python3 the round is actually "half to even". I'm not sure what the rounding algorithm is for %f, but I have a suspicion it might be half to even.

[issue17237] m68k aligns on 16bit boundaries.

2013-02-20 Thread mirabilos
mirabilos added the comment: Serhiy Storchaka dixit: >> Which tree should I build? A release (if so, which)? Or >> some CVS branch? > >It doesn't matter. Erm, still, which one do I build? Not 3.2 because it obviously works, at least as packaged in Debian. bye, //mirabilos -- Yay for having to

[issue17258] multiprocessing.connection challenge implicitly uses MD5

2013-02-20 Thread Barry A. Warsaw
Changes by Barry A. Warsaw : -- nosy: +doko ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.

[issue17258] multiprocessing.connection challenge implicitly uses MD5

2013-02-20 Thread Barry A. Warsaw
Changes by Barry A. Warsaw : -- nosy: +barry ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python

[issue17186] no way to introspect registered atexit handlers

2013-02-20 Thread Barry A. Warsaw
Changes by Barry A. Warsaw : -- nosy: +barry ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python

[issue16037] httplib: header parsing is not delimited

2013-02-20 Thread Barry A. Warsaw
Changes by Barry A. Warsaw : -- nosy: +barry versions: +Python 2.6 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscrib

[issue16043] xmlrpc: gzip_decode has unlimited read()

2013-02-20 Thread Barry A. Warsaw
Changes by Barry A. Warsaw : -- nosy: +barry versions: +Python 2.6 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscrib

[issue17260] Seg fault when calling unicode() on old style class in virtualenv

2013-02-20 Thread Johannes
New submission from Johannes: Running the code attached causes a segmentation fault. This only occurs when run from within a virtual environment, and when the class is an old style class. I've tested on OSX with both 2.7.3 installed via Homebrew, and the default 2.7.2 Python installation. Al

[issue17260] Seg fault when calling unicode() on old style object in virtualenv

2013-02-20 Thread Johannes
Changes by Johannes : -- title: Seg fault when calling unicode() on old style class in virtualenv -> Seg fault when calling unicode() on old style object in virtualenv ___ Python tracker __

[issue17259] locale.format() rounding is not reliable for floats

2013-02-20 Thread Eric V. Smith
Eric V. Smith added the comment: Mark is the ultimate authority here, but my recollection is (and a quick scan of the code shows) that half to even rounding is used in all of our float to string conversions. So that includes %f and float.__format__, among others. -- __

[issue17258] multiprocessing.connection challenge implicitly uses MD5

2013-02-20 Thread Antoine Pitrou
Changes by Antoine Pitrou : -- versions: -Python 2.6, Python 2.7, Python 3.1, Python 3.2, Python 3.3, Python 3.5 ___ Python tracker ___

[issue17260] Seg fault when calling unicode() on old style object in virtualenv

2013-02-20 Thread Antoine Pitrou
Antoine Pitrou added the comment: Can you please post a gdb traceback? -- nosy: +pitrou ___ Python tracker ___ ___ Python-bugs-list ma

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Barry A. Warsaw
Barry A. Warsaw added the comment: I'm working on applying the 2.x patch to 2.6, but one thing interesting of note: sudo, at least on Debian and derivatives going back at least to Squeeze, generally reset the environment by default (i.e. env_reset). So you'd have to either have disabled env_r

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2013-02-20 Thread Antoine Pitrou
Antoine Pitrou added the comment: > I'm working on applying the 2.x patch to 2.6, but one thing > interesting of note: sudo, at least on Debian and derivatives going > back at least to Squeeze, generally reset the environment by default > (i.e. env_reset). So you'd have to either have disabled e

  1   2   >