[issue27568] "HTTPoxy", use of HTTP_PROXY flag supplied by attacker in CGI scripts

Senthil Kumaran added the comment: This is also committed in 2.7 branch in ba915d561667. This is committed in all active versions(2.7, 3.5, 3.6) and also versions which receive security updates (3.3 and 3.4). This issue is resolved. Thank you for the patch, Rémi. (In msg271688, I pondered if

[issue27568] "HTTPoxy", use of HTTP_PROXY flag supplied by attacker in CGI scripts

Roundup Robot added the comment: New changeset 95b09ccc8a3e by Senthil Kumaran in branch '3.3': Prevent HTTPoxy attack (CVE-2016-1000110) https://hg.python.org/cpython/rev/95b09ccc8a3e New changeset 3c19023c9fec by Senthil Kumaran in branch '3.4': [merge from 3.3] Prevent HTTPoxy attack (CVE-201

[issue10673] multiprocess.Process join method - timeout indistinguishable from success

Berker Peksag added the comment: Thread.join() also returns None in all cases so +1 for documenting the current behavior. -- keywords: +easy nosy: +berker.peksag stage: -> needs patch versions: +Python 3.5, Python 3.6 -Python 3.3 ___ Python tracker

[issue27656] [Patch] Make presence of SCHED_* optional

Roundup Robot added the comment: New changeset 095b424127e7 by Benjamin Peterson in branch '3.5': all SCHED_ constants are optional (closes #27656) https://hg.python.org/cpython/rev/095b424127e7 New changeset 64b763290da9 by Benjamin Peterson in branch 'default': merge 3.5 (#27656) https://hg.py

[issue19660] decorator syntax: allow testlist instead of just dotted_name

Changes by Berker Peksag : -- nosy: +berker.peksag ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail

[issue13651] Improve redirection in urllib

Changes by Martin Panter : -- resolution: -> duplicate stage: -> resolved status: open -> closed superseder: -> [urllib.request.HTTPRedirectHandler.http_error_302] Relative Redirect issue ___ Python tracker ___

[issue25895] urllib.parse.urljoin does not handle WebSocket URLs

Martin Panter added the comment: My view is that because the schemes are not in the documented list of supported schemes, this is a new feature, and any documentation update should include a “versionadded” or similar notice. -- components: +Library (Lib) stage: -> patch review __

[issue27366] PEP487: Simpler customization of class creation

Nick Coghlan added the comment: The new porting note doesn't quite capture all the subtleties of the situation, but should be sufficient for folks to get any affected custom metaclasses working again (since the key is to avoid passing those parameters up to type.__new__). I also added a note

[issue27366] PEP487: Simpler customization of class creation

Roundup Robot added the comment: New changeset 313e8fdb0d0c by Nick Coghlan in branch 'default': Issue 27366: PEP 487 docs updates https://hg.python.org/cpython/rev/313e8fdb0d0c -- ___ Python tracker __

[issue27657] urlparse fails if the path is numeric

Martin Panter added the comment: The main backward compatibility consideration would be Issue 754016, but don’t agree with the changes made, and would support reverting them. The original bug reporter wanted urlparse("1.2.3.4:80", "http") to be treated as the URL http://1.2.3.4:80, but the IP

[issue27366] PEP487: Simpler customization of class creation

Nick Coghlan added the comment: D'oh, another good catch Emanuel - and I'm even the one that raised the need to mention that in the Porting notes during the python-dev discussion :P I'll post an update to the What's New shortly. -- stage: resolved -> needs patch __

[issue27366] PEP487: Simpler customization of class creation

Emanuel Barry added the comment: Hello Martin, and thank you for your patch! However, this patch removed the ability to pass keyword arguments to `type`, and it's not documented anywhere. I believe it should be documented at least in e.g. the "Changes in the Python API" of the What's New in Py

[issue27658] python 3.5.2 built from source fails to install completely on Mac OS X 10.11.6. Crashes subsequently.

Mario Grgic added the comment: OK, after installing OpenSSL in /usr/local/ssl and even after copying libssl.pc, libcrypt.pc and openssl.pc over to /usr/local/lib/pkgconfig (which is where my pkg-config is looking or *.pc files) the configure script is still not finding the correct libcrypto.

[issue27658] python 3.5.2 built from source fails to install completely on Mac OS X 10.11.6. Crashes subsequently.

Ned Deily added the comment: libcrypto is part of OpenSSL which is famous for not maintaining ABI compatibility across versions and generally you should be using the most recent version of OpenSSL. Depending what and where you have your copy installed, it's also possible the build picked up t

[issue23150] urllib parse incorrect handing of params

Martin Panter added the comment: If the problem was just Julian not being aware of urlsplit(), there is not much to be done for this bug. -- resolution: -> not a bug status: open -> pending ___ Python tracker ___

[issue22891] code removal from urllib.parse.urlsplit()

Martin Panter added the comment: Issue 27657 has been opened about the quirk with numeric URLs -- dependencies: +urlparse fails if the path is numeric ___ Python tracker ___

[issue27658] python 3.5.2 built from source fails to install completely on Mac OS X 10.11.6. Crashes subsequently.

Mario Grgic added the comment: It looks like it is picking up libcrypto.1.0.0.dylib from /usr/local/lib which I installed there as dependency for other binaries. Is there a minimal version of libcrypto that Python 3.5.2 needs? -- ___ Python tracker

[issue27658] python 3.5.2 built from source fails to install completely on Mac OS X 10.11.6. Crashes subsequently.

Ned Deily added the comment: The crash is in libcrypto but Apple doesn't supply a libcrypto.1.0.0 with OS X 10.11, only 0.9.7 and 0.9.8. Check the rest of the crash log to see where you're picking it up from and make sure you have an up-to-date version. If you have a version from MacPorts or

[issue27658] python 3.5.2 built from source fails to install completely on Mac OS X 10.11.6. Crashes subsequently.

Changes by Ned Deily : -- nosy: +ned.deily ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.

[issue27658] python 3.5.2 built from source fails to install completely on Mac OS X 10.11.6. Crashes subsequently.

New submission from Mario Grgic: I am on Mac OS X 10.11.6 trying to build and install Python 3.5.2 from source. I only have system Python 2.7.10 , and no other instances of Python 3.x. I configure the build as follows: ./configure --prefix=/Volumes/ramdisk/python3.5.2 The code is built witho

[issue27604] More details about `-O` flag

R. David Murray added the comment: Heh, that comment about Berker came out wrong. I meant, he seems willing to do, and make time for, the small doc commits that some of the rest of us don't seem to get around to, which is great. -- ___ Python track

[issue27604] More details about `-O` flag

R. David Murray added the comment: Oh, don't say never. Berker seems to like these kind of small commits, and it won't get lost. Who knows, I may even decide to tackle it. Or someone else will decide to do the research and update your patch. -- _

[issue27604] More details about `-O` flag

Ram Rachum added the comment: Well, I guess we had a fun week exchanging a couple thousand words about a two-line change to the docs that's now never going to happen ;) -- ___ Python tracker __

[issue27604] More details about `-O` flag

R. David Murray added the comment: I wouldn't object, but if I started to do it I'd wind up doing the research to "do it right" instead, so it would have to be someone else doing the intermediate commit :) -- ___ Python tracker

[issue27604] More details about `-O` flag

Ram Rachum added the comment: Hmm. What do you think about merging 3.patch now, and then possibly adding more information later? (Or asking the people who are designing the complex behvior you describe to write those docs.) -- ___ Python tracker

[issue27604] More details about `-O` flag

R. David Murray added the comment: You know, it's actually more complicated than this now. We recently changed the way optimization levels are handled in pyc files in such a way that it is possible for other optimization 'levels" to be added by third parties. So the reference information is

[issue27657] urlparse fails if the path is numeric

R. David Murray added the comment: See issue 14072. It may be time to look at this again, but we may still be constrained by backward compatibility. -- nosy: +r.david.murray ___ Python tracker ___

[issue27657] urlparse fails if the path is numeric

New submission from Björn Lindqvist: This affects both Python 2 and 3. This is as expected: >>> urlparse('abc:123.html') ParseResult(scheme='abc', netloc='', path='123.html', params='', query='', fragment='') >>> urlparse('123.html:abc') ParseResult(scheme='123.html', netloc='', path='abc', par

[issue24672] shutil.rmtree fails on non ascii filenames

Changes by R. David Murray : -- resolution: -> wont fix stage: -> resolved status: open -> closed versions: -Python 3.5, Python 3.6 ___ Python tracker ___

[issue19837] Wire protocol encoding for the JSON module

Марк Коренберг added the comment: In real life, I can confirm, that porting from Python2 to Python3 is almost automatic except JSON-related fixes. -- ___ Python tracker ___

[issue19837] Wire protocol encoding for the JSON module

Марк Коренберг added the comment: One of the problem, that decodeing JSON is FSM, where input is one symbol rather than one byte. AFAIK, Python still does not have FSM for decoding UTF-8 sequence, so iterative decoding of JSON will require more changes than expected. -- nosy: +mmarkk

[issue24672] shutil.rmtree fails on non ascii filenames

Jason R. Coombs added the comment: I agree. I was able to apply a fairly simple fix to setuptools to address the failure (https://github.com/pypa/setuptools/commit/857949575022946cc60c7cd1d0d088246d3f7540). I suggest closing this ticket as won't fix. -- __

[issue22724] byte-compile fails for cross-builds

Xavier de Gaye added the comment: Patch rebased to current tip. To summarize: * The root cause of the problem reported by Benedikt still exists. * The problem is hidden now that the shared libraries names include the PLATFORM_TRIPLET. * But byte-compilation still fails for cross-builds when the

[issue27656] [Patch] Make presence of SCHED_* optional

New submission from Ed Schouten: The SCHED_* constants that are part of POSIX's are all optional: http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/sched.h.html Python already declares the SCHED_SPORADIC constant as part of the POSIX module optionally, depending on whether it is presen

[issue24773] Implement PEP 495 (Local Time Disambiguation)

Roundup Robot added the comment: New changeset eed3a5b9239f by Alexander Belopolsky in branch 'default': Issue 24773: Use the standard Asia/Tehran name in the Iran test. https://hg.python.org/cpython/rev/eed3a5b9239f -- ___ Python tracker

[issue24773] Implement PEP 495 (Local Time Disambiguation)

Alexander Belopolsky added the comment: > I don't know to what extent these links are considered standard (koobs) The links like Iran are non-standard. they are specified in the "backward" file in the IANA tzdata distribution which has the following preamble: # This file provides links betwee

[issue23968] rename the platform directory from plat-$(MACHDEP) to plat-$(PLATFORM_TRIPLET)

Changes by koobs : -- nosy: +koobs ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mail

[issue27576] An unexpected difference between dict and OrderedDict

Xiang Zhang added the comment: After totally studying OrderedDict, I get a better understanding of what Serhiy means. So although we can get a better performance for dict, it's not needed at all. Remove the v3 patch. -- ___ Python tracker

[issue27576] An unexpected difference between dict and OrderedDict

Changes by Xiang Zhang : Removed file: http://bugs.python.org/file43902/odict_update_v3.patch ___ Python tracker ___ ___ Python-bugs-list mail

[issue23968] rename the platform directory from plat-$(MACHDEP) to plat-$(PLATFORM_TRIPLET)

Xavier de Gaye added the comment: It is also broken for gcc, see the buildbot 'compile' output. It seems broken for all non windows builds whatever the compiler. -- ___ Python tracker __

[issue23968] rename the platform directory from plat-$(MACHDEP) to plat-$(PLATFORM_TRIPLET)

Ned Deily added the comment: It's not just broken for cross-compiling. As I noted earlier, it's broken when using other than gcc, such as is the case with current OS X systems. This needs to be fixed before release. -- ___ Python tracker

[issue23968] rename the platform directory from plat-$(MACHDEP) to plat-$(PLATFORM_TRIPLET)

Xavier de Gaye added the comment: The reason I would like this problem fixed is that the test suite is run on an installed Python when cross-compiling, obviously you cannot run the test suite with the cross-compiled Python on the source tree of the build system. -- ___

[issue23968] rename the platform directory from plat-$(MACHDEP) to plat-$(PLATFORM_TRIPLET)

Xavier de Gaye added the comment: This problem occured for the first time on the "installed Python" buildbot (setup by Zachary) at http://buildbot.python.org/all/builders/x86%20Gentoo%20Installed%20with%20X%203.x/builds/747 on the day changeset 78d2cb7f66b6 has been commited (see msg268528). Th

[issue27655] [Patch] Don't require presence of POLLPRI

New submission from Ed Schouten: RFC 6093 states that applications "SHOULD NOT" make use of TCP's out-of-band data. For this reason, CloudABI (https://mail.python.org/pipermail/python-dev/2016-July/145708.html) does not provide support for it. This means that its poll() function does provide

[issue27568] "HTTPoxy", use of HTTP_PROXY flag supplied by attacker in CGI scripts

Senthil Kumaran added the comment: For 3.3, 3.4 it seems reasonable to backport changes from issue26804 and then apply this patch. I will do this today. -- assignee: -> orsenthil ___ Python tracker __

[issue27568] "HTTPoxy", use of HTTP_PROXY flag supplied by attacker in CGI scripts

Senthil Kumaran added the comment: The patch looks good to me. I am checking this in. -- ___ Python tracker ___ ___ Python-bugs-list m

[issue27652] Make use of non-standard error number ESHUTDOWN optional

Ed Schouten added the comment: I've filed the contributor form earlier today, but I suspect it still takes some time to get processed. The reason why the Mercurial headers were missing from the patch was because I generated this patch from the Python 3.6.0a3 source tarball. I'll make sure to

[issue27652] Make use of non-standard error number ESHUTDOWN optional

Berker Peksag added the comment: Thanks again, Ed! Could you please sign the PSF contributor agreement at https://www.python.org/psf/contrib/contrib-form/ ? Also, you don't need to strip out the header part of the patch file (Mercurial didn't recognize it as a valid patch file). You may want t

[issue27652] Make use of non-standard error number ESHUTDOWN optional

Roundup Robot added the comment: New changeset 77d16a5dc779 by Berker Peksag in branch 'default': Issue #27652: Expose ESHUTDOWN conditionally https://hg.python.org/cpython/rev/77d16a5dc779 -- nosy: +python-dev ___ Python tracker

[issue27366] PEP487: Simpler customization of class creation

Berker Peksag added the comment: Thanks for the review, Nick! (and also thanks to Martin for the great PEP!) -- ___ Python tracker ___ ___

[issue27366] PEP487: Simpler customization of class creation

Roundup Robot added the comment: New changeset 8747e3455ecb by Berker Peksag in branch 'default': Issue #27366: Tweak PEP 487 documentation https://hg.python.org/cpython/rev/8747e3455ecb -- ___ Python tracker _

[issue27652] Make use of non-standard error number ESHUTDOWN optional

Berker Peksag added the comment: Looks good to me, thanks! -- nosy: +berker.peksag stage: -> commit review title: [Patch] Make use of non-standard error number ESHUTDOWN optional -> Make use of non-standard error number ESHUTDOWN optional type: -> enhancement

[issue27654] [Patch] Use arc4random_buf() on CloudABI

New submission from Ed Schouten: While porting Python over to CloudABI (https://mail.python.org/pipermail/python-dev/2016-July/145708.html), we stumbled upon a small issue that caused the build to fail. As CloudABI is a sandboxed runtime environment, there is no support for accessing the glob

[issue27653] [Patch] Also disable the use of on CloudABI

New submission from Ed Schouten: While porting Python over to CloudABI (https://mail.python.org/pipermail/python-dev/2016-July/145708.html), we stumbled upon a small issue that caused the build to fail. As CloudABI is a sandboxed environment, there currently isn't any support for modifying lo

[issue27652] [Patch] Make use of non-standard error number ESHUTDOWN optional

New submission from Ed Schouten: While porting Python over to CloudABI (https://mail.python.org/pipermail/python-dev/2016-July/145708.html), we noticed that the core Python code maps ESHUTDOWN over to BrokenPipeError. This is fine, except for the fact that ESHUTDOWN is used unconditionally. It

[issue27651] bytearray changes when function mutates it

SilentGhost added the comment: bytearray is a mutable object and the behaviour is compatible with behaviour of any mutable object in Python. You're passing a into the yuke_bpe function and the original object is being modified (emptied) there. To work around this you could copy the object with

[issue27645] Supporting native backup facility of SQLite

Lele Gaifax added the comment: Ok, the agreement is fullfilled. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscrib

[issue26942] android: test_ctypes crashes on armv7 and aarch64

Xavier de Gaye added the comment: We should wait for the pull request to be merged in the libffi development repo before committing the patch. The PR is at https://github.com/libffi/libffi/pull/265. -- ___ Python tracker

[issue27651] About bytearray

New submission from eatrawmeat391: I converted a function name yuke_bpe from C and ran into an unknown issue after running it.The code works but it emptied all of my bytearray. You can reproduce the problem by doing it in the command line from unbpe import yuke_bpe a = bytearray("This is a byte

[issue27366] PEP487: Simpler customization of class creation

Nick Coghlan added the comment: Good catches Berker - go ahead and apply the improvements whenever's convenient :) -- ___ Python tracker ___

[issue27366] PEP487: Simpler customization of class creation

Berker Peksag added the comment: Sorry, I'm a bit late to the party. Here are some tweaks to ecc7bff738e0. I've added versionadded directives, updated the tests to use new style classes and removed a duplicate sentence from the __init_subclass__ docstring. -- Added file: http://bugs.py

[issue27453] $CPP invocation in configure must use $CPPFLAGS

Xavier de Gaye added the comment: Thanks for the patch Chi Hsuan Yen! -- resolution: -> fixed stage: commit review -> resolved status: open -> closed ___ Python tracker ___

[issue27453] $CPP invocation in configure must use $CPPFLAGS

Roundup Robot added the comment: New changeset 4cb94e561e2d by Xavier de Gaye in branch '3.5': Issue #27453: CPP invocation in configure must use CPPFLAGS. https://hg.python.org/cpython/rev/4cb94e561e2d New changeset 92b3ce7ca95c by Xavier de Gaye in branch 'default': (merge from 3.5) Issue #274

[issue16632] Enable DEP and ASLR

Berker Peksag added the comment: This has already been backported to 2.7 in issue 24508. -- nosy: +berker.peksag resolution: -> fixed status: open -> closed ___ Python tracker _