[issue35748] urlparse library detecting wrong hostname leads to open redirect vulnerability

2019-01-15 Thread Neeraj Sonaniya
New submission from Neeraj Sonaniya : Summary: It have been identified that `urlparse` under `urllib.parse` module is detecting wrong hostname which could leads to a security issue known as Open redirect vulnerability. Steps to reproduce the issue: Following code will help you in

Re: python package management confusion

2019-01-15 Thread dieter
dcs3spp via Python-list writes: > ... > So to manage the development of private packages, e.g. wheels, I would have > to use my own private repository (something like devpi or a an alternative > cloud pypi subscription service) to store each private dependency that I have > written. No, you

Re: get the terminal's size

2019-01-15 Thread Karen Shaeffer
That will tell you the terminal size at the time Python was started. If the terminal size has changed while Python was running, those environment variables will be wrong. You need to use the TIOCGWINSZ ioctl call: http://www.delorie.com/djgpp/doc/libc/libc_495.html And to detect the

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread Kyle Evans
Kyle Evans added the comment: > * On FreeBSD, if setting posix_spawn() "attributes" or execute posix_spawn() > "file actions" fails, posix_spawn() succeed but the child process exits > immediately with exit code 127 without trying to call execv(). If execv() > fails, posix_spawn() succeed,

[issue34782] Pdb crashes when code is executed in a mapping that does not define `__contains__`

2019-01-15 Thread Henry Chen
Change by Henry Chen : -- nosy: +scotchka ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35730] IDLE: Fix squeezer test_reload.

2019-01-15 Thread Terry J. Reedy
Change by Terry J. Reedy : -- pull_requests: -11182 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35730] IDLE: Fix squeezer test_reload.

2019-01-15 Thread Terry J. Reedy
Change by Terry J. Reedy : -- pull_requests: -11183 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

Re: sampling from frequency distribution / histogram without replacement

2019-01-15 Thread duncan smith
On 15/01/2019 17:59, Ian Hobson wrote: > Hi, > > If I understand your problem you can do it in two passes through the > population. > The thing is that I start with the population histogram and I want to generate a sample histogram. The population itself is too large to deal with each

[issue35692] pathlib.Path.exists() on non-existent drive raises WinError instead of returning False

2019-01-15 Thread Eryk Sun
Eryk Sun added the comment: > There's no reason a non-existing drive should fail differently than > a non-existing parent directory. The drive exists (or should) if we're getting ERROR_NOT_READY (21). It's likely a removable media device, such as an optical disc or card reader, and there's

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Ned Deily
Ned Deily added the comment: New changeset 216a4d83c3b72f4fdcd81b588dc3f42cc461739a by Ned Deily (Miss Islington (bot)) in branch '3.6': bpo-35746: Fix segfault in ssl's cert parser (GH-11569) (GH-11573) https://github.com/python/cpython/commit/216a4d83c3b72f4fdcd81b588dc3f42cc461739a

[issue35306] OSError [WinError 123] when testing if pathlib.Path('*') (asterisks) exists

2019-01-15 Thread Eryk Sun
Eryk Sun added the comment: > (sidenote: what os.path operation does Path.resolve() match? > Path('nonexistent').resolve() returns a relative path on Python > 3.7.1, whereas Path().resolve() returns an absolute path.) pathlib should resolve 'nonexistent' in Windows. It works as expected in

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: subprocess_bench_stdout.py: benchmark for PR 11575 using stdout=subprocess.PIPE, /usr/bin/pwd, and allocate 2 GiB of memory in the parent process. Result on my laptop: Mean +- std dev: [fork_exec] 28.2 ms +- 0.3 ms -> [posix_spawn] 561 us +- 209 us: 50.25x

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread STINNER Victor
Change by STINNER Victor : -- pull_requests: +11248, 11249, 11250 ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread STINNER Victor
Change by STINNER Victor : -- pull_requests: +11248, 11249 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread STINNER Victor
Change by STINNER Victor : -- pull_requests: +11248 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: More benchmarks. I modified subprocess_bench.py to use: ARGS = ["/usr/bin/python3", "-S", "-E", "-c", "pass"] => Mean +- std dev: [fork_exec] 34.1 ms +- 0.4 ms -> [posix_spawn] 6.85 ms +- 0.08 ms: 4.97x faster (-80%) Benchmark using: ARGS =

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
miss-islington added the comment: New changeset 06b15424b0dcacb1c551b2a36e739fffa8d0c595 by Miss Islington (bot) in branch '2.7': bpo-35746: Fix segfault in ssl's cert parser (GH-11569) https://github.com/python/cpython/commit/06b15424b0dcacb1c551b2a36e739fffa8d0c595 --

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: TALOS-2019-0758.txt: "Credit: Discovered by Colin Read and Nicolas Edet of Cisco." Can we credit them somewhere? Maybe edit the NEWS entry to mention their name? -- ___ Python tracker

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
miss-islington added the comment: New changeset be5de958e9052e322b0087c6dba81cdad0c3e031 by Miss Islington (bot) in branch '3.7': bpo-35746: Fix segfault in ssl's cert parser (GH-11569) https://github.com/python/cpython/commit/be5de958e9052e322b0087c6dba81cdad0c3e031 --

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: New changeset 9daecf37a571e98aaf43a387bcc9e41a7132f477 by Victor Stinner in branch 'master': bpo-35537: subprocess uses os.posix_spawn in some cases (GH-11452) https://github.com/python/cpython/commit/9daecf37a571e98aaf43a387bcc9e41a7132f477 --

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: Gregory P. Smith: """ Thanks for all your research and reference links on this! As a _posixsubprocess maintainer, I am not against either posix_spawn or vfork being used directly in the future when feasible. A challenge, especially with platform specific

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread Antoine Pitrou
Change by Antoine Pitrou : -- nosy: -pitrou ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35537] use os.posix_spawn in subprocess

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: Serhiy Storchaka: > I mean that after writing tests they can be tested manually by disabling > conditions for posix_spawn one by one. I.e. some tests should fail if remove > "stdout is None" and some tests should fail if remove "not close_fds", etc. I made

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
Change by miss-islington : -- pull_requests: +11242, 11243, 11244, 11245, 11246, 11247 ___ Python tracker ___ ___ Python-bugs-list

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
Change by miss-islington : -- pull_requests: +11242, 11243, 11244, 11245 ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
Change by miss-islington : -- pull_requests: +11241, 11242, 11243 ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
Change by miss-islington : -- pull_requests: +11242, 11243, 11244, 11245, 11247 ___ Python tracker ___ ___ Python-bugs-list mailing

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
Change by miss-islington : -- pull_requests: +11241, 11242 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
Change by miss-islington : -- pull_requests: +11242, 11243, 11244 ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
Change by miss-islington : -- pull_requests: +11241 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread miss-islington
miss-islington added the comment: New changeset a37f52436f9aa4b9292878b72f3ff1480e2606c3 by Miss Islington (bot) (Christian Heimes) in branch 'master': bpo-35746: Fix segfault in ssl's cert parser (GH-11569) https://github.com/python/cpython/commit/a37f52436f9aa4b9292878b72f3ff1480e2606c3

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Larry Hastings
Larry Hastings added the comment: I can confirm this crashes a freshly-built interpreter from the current 3.5 and 3.4 branches. -- nosy: +larry ___ Python tracker ___

[issue35688] "pip install --user numpy" fails on Python from the Windows Store

2019-01-15 Thread Steve Dower
Steve Dower added the comment: > use AddDllDirectory, (which is as accessable as os.environ['PATH'] but is not > considered a security risk so far) The parenthical is incorrect. The user-specified DLL search directory is separate from PATH, and both appear in the default DLL search order

[issue23078] unittest.mock patch autospec doesn't work on staticmethods

2019-01-15 Thread John Parejko
John Parejko added the comment: Were you able to make any progress on this? Do you need any help? -- nosy: +parejkoj-3 ___ Python tracker ___

[issue35713] Fatal Python error: _PySys_BeginInit: can't initialize sys module

2019-01-15 Thread Tasy
Tasy added the comment: Configuration Options: ../configure --prefix=$HOME --enable-shared --enable-optimizations --with-system-expat --with-system-ffi --with-ensurepip=yes Make throws the following warning: *** WARNING: renaming "_curses_panel" since importing it failed: No module

Re: get the terminal's size

2019-01-15 Thread Cameron Simpson
On 15Jan2019 13:08, Alex Ternaute wrote: I tried : P = Popen(['stty', '-a'], stdout=subprocess.PIPE, universal_newlines=True) and it runs fine too, so the output seems not really related to that fd. But it is! stty(1) fetches the terminal settings from its standard input, so "fd" is used to

[issue35688] "pip install --user numpy" fails on Python from the Windows Store

2019-01-15 Thread mattip
mattip added the comment: It seems changing os.environ['PATH'] is a security risk and is not allowed for Windows Store apps. The suggestion in the NumPy issue is to: - use AddDllDirectory, (which is as accessable as os.environ['PATH'] but is not considered a security risk so far), but this

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Ned Deily
Change by Ned Deily : Removed file: https://bugs.python.org/file48055/image001.png ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Ned Deily
Change by Ned Deily : Removed file: https://bugs.python.org/file48054/image001.png ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue29871] Enable optimized locks on Windows

2019-01-15 Thread Josh Rosenberg
Josh Rosenberg added the comment: I assume you meant #35662 (based on the superseder note in the history). -- ___ Python tracker ___

[issue35306] OSError [WinError 123] when testing if pathlib.Path('*') (asterisks) exists

2019-01-15 Thread Antoine Pitrou
Antoine Pitrou added the comment: I'm fine with swallowing the error in both exists() and resolve(). We should be careful not to swallow errors too broadly, though. The code paths should be audited to check that EINVAL can't mean something else. -- versions: +Python 3.8 -Python 3.6

[issue35692] pathlib.Path.exists() on non-existent drive raises WinError instead of returning False

2019-01-15 Thread Antoine Pitrou
Antoine Pitrou added the comment: I think exists() should simply return False here. There's no reason a non-existing drive should fail differently than a non-existing parent directory. -- stage: -> needs patch versions: +Python 3.8 ___ Python

[issue35306] OSError [WinError 123] when testing if pathlib.Path('*') (asterisks) exists

2019-01-15 Thread Steve Dower
Steve Dower added the comment: Pathlib doesn't necessarily directly follow os on its error handling - adding Antoine for comment. Passing strict=False to resolve() should be able to handle an invalid name like that. If not, I propose that we change it so that it does. -- nosy:

[issue29515] socket module missing IPPROTO_IPV6, IPPROTO_IPV4 on Windows

2019-01-15 Thread Steve Dower
Steve Dower added the comment: No progress, but I like the extra defines idea best (directly in socketmodule.c, not in a public header file). That's the easiest way to close the gap between (apparently) real constants used on Windows and the preprocessor defines (apparently) used elsewhere.

[issue29871] Enable optimized locks on Windows

2019-01-15 Thread Steve Dower
Steve Dower added the comment: On issue 35562 Jeff posted a deeper analysis of the issue in TIMEDWAIT. That will need fixing along with the other regressions before we can enable these. -- nosy: +je...@livedata.com ___ Python tracker

[issue35662] Windows #define _PY_EMULATED_WIN_CV 0 bug

2019-01-15 Thread Steve Dower
Steve Dower added the comment: It's broken, but unused. And the entire section needs fixing before it can be used, which necessitates fixing this function. So issue 29871 covers this sufficiently (though I'll post a link back to this one for the added context on this particular issue).

[issue35692] pathlib.Path.exists() on non-existent drive raises WinError instead of returning False

2019-01-15 Thread Steve Dower
Steve Dower added the comment: In issue 22759 there was some logic applied for which errors to forward rather than hide. I'm inclined to agree that this one should be hidden, but it may have to be done by checking the winerror field rather than the exception type, since other

[issue35688] "pip install --user numpy" fails on Python from the Windows Store

2019-01-15 Thread Steve Dower
Steve Dower added the comment: I posted on the numpy thread: Most likely the DLL is failing to load, which the importer returns as "not found" (as it falls back on other search mechanisms and doesn't retain the error). I suggested loading it directly with ctypes to see if there's a better

[issue35739] Enable verbose of tests during PGO build on amd64 platforms

2019-01-15 Thread Steve Dower
Steve Dower added the comment: You can provide this new default as a command line option when invoking the script (--pgo-job, IIRC), which should satisfy the occasional need to do this. I would rather keep the default quieter so that the build does not take as long (though I guess there is

Re: help with python difference between number

2019-01-15 Thread MRAB
On 2019-01-15 14:07, achyuta2...@gmail.com wrote: M <01/14/2019 08:07:01> Count:0 Total:50 Free: 20 A B M <01/14/2019 08:07:04> Count:1 Total:5 Free:10 A B M <01/14/2019 08:07:07> Count:2 Total:5 Free:3 A B I am trying to make a output like where it prints the free and then

[issue35661] Store the venv prompt in pyvenv.cfg

2019-01-15 Thread Steve Dower
Steve Dower added the comment: One other aspect of this may be the confusion that ensues when changing the setting doesn't change the prompt when you activate it. It would be possible (though not necessarily trivial) to update the activate scripts to read the prompt from the file, though I

[issue35747] Python threading event wait influenced by date change

2019-01-15 Thread ido k
ido k added the comment: thanks for the comment please look at the code. i use wait on event for 60 seconds. the wait timed out in less than 60 seconds... why this is not a bug? -- ___ Python tracker

Re: sampling from frequency distribution / histogram without replacement

2019-01-15 Thread Ian Hobson
Hi, If I understand your problem you can do it in two passes through the population. First, however, lets work through taking a sample of 2 from 7 to demonstrate the method. Take the first element with a probability of 2/7. (Note 1). If you took it, you only want 1 more, so the probability

[issue35747] Python threading event wait influenced by date change

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: Python 3 uses a monotonic clock to implement timeouts, such clock is not affected by system clock changes *on purpose*. See time.monotonic() and PEP 418: https://docs.python.org/dev/library/time.html#time.monotonic https://www.python.org/dev/peps/pep-0418/

[issue35747] Python threading event wait influenced by date change

2019-01-15 Thread ido k
New submission from ido k : Happen on ubuntu Opening two threads - one thread alternate system date The seconds waits for 60 seconds. joining both threads. The execution should take at least 60 seconds. Takes less then 15 seconds. Any work around? -- components: Library (Lib)

[issue35736] [xml.minidom] Missing component in table after getElementsByTagName("nn")

2019-01-15 Thread Brett Cannon
Change by Brett Cannon : -- title: Missing component in table after getElementsByTagName("nn") -> [xml.minidom] Missing component in table after getElementsByTagName("nn") ___ Python tracker

[issue34782] Pdb crashes when code is executed in a mapping that does not define `__contains__`

2019-01-15 Thread BTaskaya
Change by BTaskaya : -- keywords: +patch, patch pull_requests: +11239, 11240 stage: -> patch review ___ Python tracker ___ ___

[issue34782] Pdb crashes when code is executed in a mapping that does not define `__contains__`

2019-01-15 Thread BTaskaya
Change by BTaskaya : -- keywords: +patch pull_requests: +11239 stage: -> patch review ___ Python tracker ___ ___ Python-bugs-list

[issue35661] Store the venv prompt in pyvenv.cfg

2019-01-15 Thread Brett Cannon
Brett Cannon added the comment: First, Cheryl, thanks for taking this on! I think one way to potentially simplify this whole situation about the whitespace for the prompt is to actually store the raw value that gets passed into EnvBuilder instead of the prompt as formatted for the

[issue35701] [uuid] 3.8 breaks weak references for UUIDs

2019-01-15 Thread David Heiberg
Change by David Heiberg : -- keywords: +patch, patch, patch pull_requests: +11236, 11237, 11238 stage: needs patch -> patch review ___ Python tracker ___

[issue35701] [uuid] 3.8 breaks weak references for UUIDs

2019-01-15 Thread David Heiberg
Change by David Heiberg : -- keywords: +patch, patch pull_requests: +11236, 11237 stage: needs patch -> patch review ___ Python tracker ___

[issue35701] [uuid] 3.8 breaks weak references for UUIDs

2019-01-15 Thread David Heiberg
Change by David Heiberg : -- keywords: +patch pull_requests: +11236 stage: needs patch -> patch review ___ Python tracker ___ ___

Re: sampling from frequency distribution / histogram without replacement

2019-01-15 Thread duncan smith
On 15/01/2019 02:41, Spencer Graves wrote: > > > On 2019-01-14 18:40, duncan smith wrote: >> On 14/01/2019 22:59, Gregory Ewing wrote: >>> duncan smith wrote: Hello,    Just checking to see if anyone has attacked this problem before for cases where the population size is

[issue33944] Deprecate and remove pth files

2019-01-15 Thread Chris Billington
Chris Billington added the comment: > Linux distros approach to handling this is terrible because they dump all > their system packages into a single global site-packages, leading to the > every growing sys.path problem that Barry is concerned about. > However, that's entirely the fault of

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Christian Heimes
Change by Christian Heimes : Added file: https://bugs.python.org/file48053/TALOS-2019-0758 - POC.pem ___ Python tracker ___ ___

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Christian Heimes
Change by Christian Heimes : Added file: https://bugs.python.org/file48052/TALOS-2019-0758.txt ___ Python tracker ___ ___ Python-bugs-list

[issue35736] Missing component in table after getElementsByTagName("nn")

2019-01-15 Thread Michael Krötlinger
Michael Krötlinger added the comment: http://schemas.xmlsoap.org/wsdl/; xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/; xmlns:tns="http://soap.ebs.client.chipkarte.at; xmlns:wsam="http://www.w3.org/2007/05/addressing/metadata; xmlns:wsp="http://www.w3.org/ns/ws-policy;

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

2019-01-15 Thread STINNER Victor
Change by STINNER Victor : -- title: TALOS-2018-0758 Denial of Service -> [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service ___ Python tracker ___

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Christian Heimes
Change by Christian Heimes : -- keywords: +patch, patch, patch pull_requests: +11233, 11234, 11235 ___ Python tracker ___ ___

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Christian Heimes
Change by Christian Heimes : -- keywords: +patch pull_requests: +11233 ___ Python tracker ___ ___ Python-bugs-list mailing list

Re: Encounter issues to install Python

2019-01-15 Thread Anthony Flury via Python-list
What error are you getting ? 'Can not install the software' isn't enough information for me to assist in detail In the mean time - things to check : * Does your user have permission to install to the directory you are trying to install to ? * Does the disk have enough disk space to

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Christian Heimes
Change by Christian Heimes : -- keywords: +patch, patch pull_requests: +11233, 11234 ___ Python tracker ___ ___ Python-bugs-list

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Christian Heimes
Christian Heimes added the comment: Please leave the bug open and don't remove files. It's too late. The bug report has been sent to mailing lists and RSS feeds already. Also you cannot remove any files from the bug tracker. Only admins are can do that. -- resolution: fixed ->

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: I close the bug just to hide it from the home page and default search result, to have more time to fix it (make the issue less visible). -- nosy: +vstinner resolution: -> fixed stage: needs patch -> resolved status: open -> closed

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Cisco Talos
Cisco Talos added the comment: The files are removed and will be reissued to PSIRT. Regina Wilson Analyst.Business Operations regiw...@cisco.com [cid:CFA14CB5-B7B2-4FF7-8313-22D495F607D5@vrt.sourcefire.com] On Jan 15, 2019, at 12:11 PM, Cisco Talos

Re: 3 random numbers

2019-01-15 Thread Alister via Python-list
On Tue, 15 Jan 2019 06:13:00 -0800, Gengyang Cai wrote: > I managed to solve the problem and also another problem with different 3 > random numbers. But it wasn't a very good question in the first place, i > admit > > Indeed it is a poorly write exercise & I suspect it has been

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Cisco Talos
Change by Cisco Talos : Removed file: https://bugs.python.org/file48053/TALOS-2019-0758 - POC.pem ___ Python tracker ___ ___

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Cisco Talos
Change by Cisco Talos : Removed file: https://bugs.python.org/file48052/TALOS-2019-0758.txt ___ Python tracker ___ ___ Python-bugs-list

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Christian Heimes
Christian Heimes added the comment: I can confirm that CPython is affected. By the way PyCA cryptography handles the CRL DB just fine. >>> from cryptography import x509 >>> from cryptography.hazmat.backends import default_backend >>> with open("Lib/test/talos-2019-0758.pem", "rb") as f: ...

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Cisco Talos
Cisco Talos added the comment: Thanks for acknowledging. We look forward to any updates/developments on the issue reported. For further information about the Cisco Vendor Vulnerability Reporting and Disclosure Policy please refer to this document which also links to our public PGP key.

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Christian Heimes
Christian Heimes added the comment: Thanks for the report! -- assignee: -> christian.heimes components: +SSL nosy: +christian.heimes stage: -> needs patch versions: +Python 3.4, Python 3.5, Python 3.6, Python 3.7, Python 3.8 ___ Python tracker

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Cisco Talos
Change by Cisco Talos : -- versions: -Python 3.4, Python 3.5, Python 3.6, Python 3.7, Python 3.8 Added file: https://bugs.python.org/file48053/TALOS-2019-0758 - POC.pem ___ Python tracker

[issue35746] TALOS-2018-0758 Denial of Service

2019-01-15 Thread Cisco Talos
New submission from Cisco Talos : An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or

Re: Python read text file columnwise

2019-01-15 Thread Neil Cerutti
On 2019-01-15, Juris __ wrote: > Hi! > > On 15/01/2019 17:04, Neil Cerutti wrote: >> On 2019-01-11, shibashib...@gmail.com wrote: >>> Hello I'm very new in python. I have a file in the format: 2018-05-31 16:00:0028.90 81.77 4.3 2018-05-31 20:32:00

Re: Python read text file columnwise

2019-01-15 Thread Juris __
Hi! On 15/01/2019 17:04, Neil Cerutti wrote: > On 2019-01-11, shibashib...@gmail.com wrote: >> Hello >>> >>> I'm very new in python. I have a file in the format: >>> >>> 2018-05-31 16:00:0028.90 81.77 4.3 >>> 2018-05-31 20:32:0028.17 84.89 4.1 >>> 2018-06-20

[issue35745] Add import statement in dataclass code snippet

2019-01-15 Thread Windson Yang
Windson Yang added the comment: I'm not sure if we should put from dataclasses import dataclass everywhere or we should put it just in the first example as I did in the PR. -- ___ Python tracker

[issue35745] Add import statement in dataclass code snippet

2019-01-15 Thread Windson Yang
New submission from Windson Yang : Most of the example in https://docs.python.org/3/library/dataclasses.html miss code like from dataclasses import dataclass, field from typing import List I think we should add this statement in the code snippet. -- assignee: docs@python components:

Re: Python read text file columnwise

2019-01-15 Thread Neil Cerutti
On 2019-01-11, shibashib...@gmail.com wrote: > Hello >> >> I'm very new in python. I have a file in the format: >> >> 2018-05-31 16:00:0028.90 81.77 4.3 >> 2018-05-31 20:32:0028.17 84.89 4.1 >> 2018-06-20 04:09:0027.36 88.01 4.8 >> 2018-06-20 04:15:00

[issue35741] unittest.skipUnless(time._STRUCT_TM_ITEMS == 11, "needs tm_zone support") doesn't work

2019-01-15 Thread Karthikeyan Singaravelan
Change by Karthikeyan Singaravelan : -- nosy: +belopolsky ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

Re: 3 random numbers

2019-01-15 Thread Gengyang Cai
I managed to solve the problem and also another problem with different 3 random numbers. But it wasn't a very good question in the first place, i admit On Tuesday, January 15, 2019 at 9:55:00 PM UTC+8, Rick Johnson wrote: > Gengyang Cai wrote: > > Can anyone understand it and explain it

help with python difference between number

2019-01-15 Thread achyuta2017
M <01/14/2019 08:07:01> Count:0 Total:50 Free: 20 A B M <01/14/2019 08:07:04> Count:1 Total:5 Free:10 A B M <01/14/2019 08:07:07> Count:2 Total:5 Free:3 A B I am trying to make a output like where it prints the free and then the difference between the current free and

[issue33944] Deprecate and remove pth files

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: > SyntaxError: encoding problem: future_fstrings IMHO that's the expected behavior. I would prefer to have to explicitly install this special encoding *before* loading a script using it. -- ___ Python tracker

[issue33944] Deprecate and remove pth files

2019-01-15 Thread Jason R. Coombs
Jason R. Coombs added the comment: > `site.addsitedir` is called for every site-packages directory (whether > global, within a venv, or at the user level), so my proposal above covers > appending multiple segments. Good point. I think you're assuming that only site dirs are appropriate for

[issue23846] asyncio : ProactorEventLoop raised BlockingIOError when ThreadPoolExecutor has many workers

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: > In any case it looks like self-pipe sock's buffer was overflown because > call_soon_threadsafe was called too many times, and loop._read_from_self > couldn't empty the buffer promptly. Then, at some point, _write_to_self > failed with an IOError. I

Re: [tkinter] question about correct use of validation

2019-01-15 Thread steve
On 15/01/2019 14:16, Rick Johnson wrote: steve wrote: Then it's just a matter of passing a keyword argument: myEntry = MyEntry(master, maxlen=20) What you have above is a tightly coiled, steaming dogpile that will litter your code base. Encapsulate that stench, would ya? sure,

[issue23846] asyncio : ProactorEventLoop raised BlockingIOError when ThreadPoolExecutor has many workers

2019-01-15 Thread miss-islington
miss-islington added the comment: New changeset c9f26714d511a338ba2fdd926e3dc62636f31815 by Miss Islington (bot) in branch '3.7': bpo-23846: Fix ProactorEventLoop._write_to_self() (GH-11566) https://github.com/python/cpython/commit/c9f26714d511a338ba2fdd926e3dc62636f31815 -- nosy:

[issue35744] Problem in the documentation of numpy.random.randint in python 2.7

2019-01-15 Thread STINNER Victor
STINNER Victor added the comment: Sorry but this is the bug tracker of Python, not of numpy. Please use https://github.com/numpy/numpy/issues instead. -- nosy: +vstinner resolution: -> third party stage: -> resolved status: open -> closed ___

[issue35744] Problem in the documentation of numpy.random.randint in python 2.7

2019-01-15 Thread Jay
New submission from Jay : Official Documentation of python 2.7 mentions that numpy.random.randint(a,b) will return a random integer from N such that a<=N<=b. But I have run the code and I have found that it never returns equal to b. So, what I did was I ran numpy.random.randint(0,1) for 50

Re: get the terminal's size

2019-01-15 Thread Alex Ternaute
Hi Cameron, >>I tried : P = Popen(['stty', '-a'], stdout=subprocess.PIPE, >>universal_newlines=True) and it runs fine too, so the output seems not >>really related to that fd. > But it is! stty(1) fetches the terminal settings from its standard > input, so "fd" is used to supply this. In your

[issue23846] asyncio : ProactorEventLoop raised BlockingIOError when ThreadPoolExecutor has many workers

2019-01-15 Thread miss-islington
Change by miss-islington : -- pull_requests: +11230, 11231, 11232 ___ Python tracker ___ ___ Python-bugs-list mailing list

  1   2   >