[issue43362] Bad free in py_sha3_new_impl function

Christian Heimes added the comment: The issue affected Python 3.10a1 to latest alpha. 3.9 and earlier are not affected. Thanks! -- resolution: -> fixed stage: patch review -> resolved status: open -> closed versions: -Python 3.8, Python 3.9 ___

[issue43362] Bad free in py_sha3_new_impl function

Christian Heimes added the comment: New changeset aa6da32edc3c6ddfda5e849561e20273b8d82771 by Christian Heimes in branch 'master': bpo-43362: Fix invalid free and return check in _sha3 module (GH-25463) https://github.com/python/cpython/commit/aa6da32edc3c6ddfda5e849561e20273b8d82771 --

[issue43877] Logging Cookbook ambiguity

Raymond Hettinger added the comment: The multiprocessing.Queue() instance will accumulate messages regardless of whether a producer or consumer is started first. -- nosy: +rhettinger ___ Python tracker

[issue43857] Fix the AttributeError message for deletion of a missing attribute

Change by Raymond Hettinger : -- nosy: +rhettinger ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://ma

[issue43874] argparse crashes on subparsers with no dest/metava

Raymond Hettinger added the comment: Would it be more reasonable to provide a default name (which is what the PR does) or to raise an exception? -- ___ Python tracker ___ ___

[issue43874] argparse crashes on subparsers with no dest/metava

paul j3 added the comment: This is a well known (if not fixed) issue - if subparsers is required, then a dest is needed to give a working error message. Looks like we've variously talked about documenting the requirement, or using some sort of substitute for the missing name. One of my hig

[issue43876] argparse documentation contrasting nargs '*' vs. '+' is misleading

Vince Reuter added the comment: Looking a bit more at the examples in the "nargs" section of the argparse docs, and on the rest of that page, I think I see the intended usage pattern emerging. nargs='*' is only ever used on that page with an optional (by prefix) option, or with the last posi

[issue43876] argparse documentation contrasting nargs '*' vs. '+' is misleading

Vince Reuter added the comment: There are two small related issues, but I'm not sure how they relate and/or if they've been addressed previously, so I'm sorry for duplicate messaging if that's the case. 1. If it's the case that absent an explicit `required=` statement, the option name prefi

[issue43876] argparse documentation contrasting nargs '*' vs. '+' is misleading

Vince Reuter added the comment: Got it, I see. I guess I'd prefer to be able to control the expectation about argument number through the keyword, without changing the option name, but I understand if the other way (as implemented) is preferred. Can you clarify, though, or direct me in the d

[issue43874] argparse crashes on subparsers with no dest/metava

Change by Raymond Hettinger : -- nosy: +paul.j3, rhettinger ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: h

[issue43876] argparse documentation contrasting nargs '*' vs. '+' is misleading

Raymond Hettinger added the comment: For me, it is the opposite. I would have been completely surprised if setting nargs caused an optional argument to become required. The "nargs" parameter is entirely about the number of data arguments, not about the option itself. When nargs=1, then

[issue43879] Add native_thread_id to PyThreadState

Change by Raymond Hettinger : -- nosy: +pitrou ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.p

[issue28254] Add C API for gc.enable, gc.disable, and gc.isenabled

Change by Raymond Hettinger : -- nosy: -rhettinger, scoder, superbobry ___ Python tracker ___ ___ Python-bugs-list mailing list Uns

[issue38908] Troubles with @runtime_checkable protocols

Guido van Rossum added the comment: Hi Kevin, If you want to work on this, could you come up with some test cases that try to explore edge cases for this behavior? Ideally some that already pass, and some that currently don't pass (because of the limitation mentioned by Ivan). It's possible th

[issue43362] Bad free in py_sha3_new_impl function

Change by Christian Heimes : -- pull_requests: +24189 pull_request: https://github.com/python/cpython/pull/25463 ___ Python tracker ___

[issue43860] unittest increment tests executed

Irit Katriel added the comment: See the section on "Distinguishing test iterations using subtests" https://docs.python.org/3/library/unittest.html#distinguishing-test-iterations-using-subtests -- nosy: +iritkatriel ___ Python tracker

[issue38530] Offer suggestions on AttributeError and NameError

Pablo Galindo Salgado added the comment: New changeset 0b1c169c4a009e1094fe5df938d2367e63ebeea0 by Pablo Galindo in branch 'master': bpo-38530: Cover more error paths in error suggestion functions (GH-25462) https://github.com/python/cpython/commit/0b1c169c4a009e1094fe5df938d2367e63ebeea0 -

[issue38530] Offer suggestions on AttributeError and NameError

Change by Pablo Galindo Salgado : -- pull_requests: +24188 pull_request: https://github.com/python/cpython/pull/25462 ___ Python tracker ___ ___

[issue43362] Bad free in py_sha3_new_impl function

Christian Heimes added the comment: Excellent finding! The issue was introduced in commit 93d50a6a8d0c5d332c11aef267e66573a09765ac as part of bpo-1635741 -- ___ Python tracker __

[issue39432] Distutils generates the wrong export symbol for unicode module names

da-woods added the comment: It looks like this wasn't quite fixed by the patch: the patch encoded `_` when it should have encoded ``. I've submitted a revised version to setuptools https://github.com/pypa/setuptools/pull/2646. My impression is that distutils is no longer updated and so ther

[issue37630] Investigate replacing SHA3 code with OpenSSL

miss-islington added the comment: New changeset 685719871ac3fb6aff3468b9c5328fc66f5486d7 by stratakis in branch 'master': bpo-37630: Do not skip the sha3 tests in case of missing builtin sha3 module (GH-20986) https://github.com/python/cpython/commit/685719871ac3fb6aff3468b9c5328fc66f5486d7

[issue38530] Offer suggestions on AttributeError and NameError

Pablo Galindo Salgado added the comment: New changeset 3ab4bea5a3ac28820781cf62a768c65370c9054c by Pablo Galindo in branch 'master': bpo-38530: Include builtins in NameError suggestions (GH-25460) https://github.com/python/cpython/commit/3ab4bea5a3ac28820781cf62a768c65370c9054c --

[issue43362] Bad free in py_sha3_new_impl function

Change by Christian Heimes : -- assignee: -> christian.heimes nosy: +christian.heimes type: crash -> behavior versions: +Python 3.8, Python 3.9 ___ Python tracker ___

[issue30226] Modernize make_ssl_certs

Change by Christian Heimes : -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Py

[issue37550] SSL Pip Error

Change by Christian Heimes : -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Py

[issue40482] _hashlib: register Python names as OpenSSL aliases

Christian Heimes added the comment: I decided against the approach. -- resolution: -> rejected stage: patch review -> resolved status: open -> closed ___ Python tracker ___ _

[issue40079] NULL pointer deref on error path in _ssl debughelpers.c

Christian Heimes added the comment: The issue has been fixed by fbf94af2af3c09493481b8559b84f6e9f0628c37 in on 2020-Jun-21. -- resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker

[issue34271] Please support logging of SSL master secret by env variable SSLKEYLOGFILE

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue34001] LibreSSL does not tolerate setting minimum_version greater than maximum_version

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue36868] New behavior of OpenSSL hostname verification not exposed, incorrectly documented

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue28453] SSLObject.selected_alpn_protocol() not documented

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue36866] Certificate verification errors in urllib.request become URLError

Change by Christian Heimes : -- assignee: christian.heimes -> components: -SSL nosy: -christian.heimes versions: +Python 3.10 -Python 3.7 ___ Python tracker ___

[issue31453] Debian Sid/Buster: Cannot enable TLS 1.0/1.1 with PROTOCOL_TLS

Christian Heimes added the comment: Python 2.7 is out of supports. 3.6 will reach end of security support soon. More recent Python versions have TLS 1.0 and 1.1 deprecated and contain workarounds for tests. -- resolution: -> out of date stage: patch review -> resolved status: open -

[issue34669] test_ssl fails if SSLv2 is enabled

Christian Heimes added the comment: We are no longer testing with any OpenSSL version that has SSL 2.0 enabled or even available. -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker

[issue32219] SSLWantWriteError being raised by blocking SSL socket

Nathaniel Smith added the comment: I don't know :-( After filing this upstream we started ignoring these exceptions, to make our CI less flaky: https://github.com/python-trio/trio/pull/365/files But unfortunately that means I don't know if we've been hitting them since then or not. ---

[issue38530] Offer suggestions on AttributeError and NameError

Change by Pablo Galindo Salgado : -- pull_requests: +24187 pull_request: https://github.com/python/cpython/pull/25460 ___ Python tracker ___ ___

[issue33025] urlencode produces bad output from ssl.CERT_NONE and friends that chokes decoders

Change by Christian Heimes : -- components: -SSL nosy: -christian.heimes versions: +Python 3.10, Python 3.8, Python 3.9 -Python 3.6, Python 3.7 ___ Python tracker ___ ___

[issue33808] ssl.get_server_certificate fails with openssl 1.1.0 but works with 1.0.2g for self-signed certificate

Christian Heimes added the comment: The issue has been stale for over two years. Closing. -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker

[issue35888] ssl module - could not get the server certificate w/o completed handshake

Christian Heimes added the comment: You are correct. The ssl.get_server_certificate() helper function performs a full handshake and then returns the certificate. It's technically possible to get the cert chain from the ServerHello message, but Python does not provide an API for that. I don'

[issue32219] SSLWantWriteError being raised by blocking SSL socket

Christian Heimes added the comment: Nathaniel, is this still an issue with recent OpenSSL and Python versions? -- status: open -> pending ___ Python tracker ___ __

[issue30141] If you forget to call do_handshake, then everything seems to work but hostname checking is disabled

Christian Heimes added the comment: 3.6 will be out of support very soon. I'm closing this old bug as wontfix. Thanks for your investigation! :) -- resolution: -> wont fix status: open -> closed ___ Python tracker

[issue39344] Getting error while importing ssl " import _ssl # if we can't import it, let the error propagate ImportError: DLL load failed while importing _ssl: The specified module could not be found

Change by Christian Heimes : -- resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Python-b

[issue35136] test_ssl fails in AMD64 FreeBSD CURRENT Shared 3.6 buildbot, OpenSSL 1.1.1a

Christian Heimes added the comment: I'm closing the issue as outdated. -- resolution: -> out of date stage: -> resolved status: open -> closed type: -> behavior ___ Python tracker

[issue33023] Unable to copy ssl.SSLContext

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue23239] SSL match_hostname does not accept IP Address

Christian Heimes added the comment: Python 2 is out of support. Python 3 can verify IP addresses in certificates correctly. -- resolution: -> out of date stage: needs patch -> resolved status: open -> closed ___ Python tracker

[issue34078] Broken CRL functionality in ssl.py

Christian Heimes added the comment: No response in over two years. I'm closing the issue. Please feel free to reopen the issue with more information. -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker

[issue41195] Interface to OpenSSL's security level

Christian Heimes added the comment: The getter is available in 3.10. Thanks for your contribution! -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker _

[issue38815] test_ssl: test_min_max_version() fails on FreeBSD and Fedora

Christian Heimes added the comment: I haven't seen the problem in a while. -- resolution: -> fixed stage: commit review -> resolved status: open -> closed ___ Python tracker

[issue42952] Incorrect handling of EC_KEY_new_by_curve_name() in the _ssl module

Christian Heimes added the comment: I have removed the code from master. Do you want to remove it from 3.9 and 3.8 or should we just ignore the dead code? -- resolution: -> fixed status: open -> pending ___ Python tracker

[issue43000] All SSL requests fail with WRONG_VERSION_NUMBER when a packet sniffer is open

Christian Heimes added the comment: The op hasn't replied in three months. I'm closing the issue. Please feel free to reopen the issue with more information. -- resolution: -> out of date stage: -> resolved status: open -> closed type: crash -> behavior

[issue42854] OpenSSL 1.1.1: use SSL_write_ex() and SSL_read_ex()

Christian Heimes added the comment: 3.10 branch now requires OpenSSL 1.1.1. This should be easy to implement. -- keywords: +easy (C) priority: normal -> high stage: -> needs patch ___ Python tracker ___

[issue42746] python3.7.3 - ssl.SSLContext() - "Killed"

Christian Heimes added the comment: The op hasn't replied in over 3 months. I'm closing the bug as staled. -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker ___

[issue42333] Port ssl module to heap types and module state (PEP 573)

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue42333] Port ssl module to heap types and module state (PEP 573)

Christian Heimes added the comment: New changeset 7f1305ef9ea7234e1a5aacbea17490232e9b7dc2 by Christian Heimes in branch 'master': bpo-42333: Port _ssl extension to multiphase initialization (PEP 489) (GH-23253) https://github.com/python/cpython/commit/7f1305ef9ea7234e1a5aacbea17490232e9b7dc2

[issue38908] Troubles with @runtime_checkable protocols

Kevin Shweh added the comment: It seems like the straightforward, minimal fix would be to just add if (getattr(cls, '_is_protocol', False) and not getattr(cls, '_is_runtime_protocol', False) and not _allow_reckless_class_cheks()): raise TypeError(...) to _ProtocolMeta.__instancech

[issue43881] add platform availabity information for os.sched_getaffinity

Change by Guo Ci Teo : -- keywords: +patch pull_requests: +24185 stage: -> patch review pull_request: https://github.com/python/cpython/pull/25459 ___ Python tracker ___ _

[issue43881] add platform availabity information for os.sched_getaffinity

Change by Guo Ci Teo : -- assignee: docs@python components: Documentation nosy: docs@python, guoci priority: normal severity: normal status: open title: add platform availabity information for os.sched_getaffinity type: enhancement versions: Python 3.10, Python 3.6, Python 3.7, Python 3

[issue28254] Add C API for gc.enable, gc.disable, and gc.isenabled

Stefan Behnel added the comment: I support that there should be a simple way to do this from C. The way via importing the "gc" module and then looking up an attribute (possibly building a Unicode string) and calling a function in it involves several operations that can take some time and req

[issue43646] ForwardRef name conflict during evaluation

Ken Jin added the comment: @tefra, thanks for testing. That's great to hear! And once again, thanks for the excellent bug report in your original message. @tefra and @gvanrossum, I'm closing this issue as it is now fixed in 3.10. If any of you feel that's wrong, please don't hesitate to re-o

[issue43880] 3.10 SSL module deprecations

Christian Heimes added the comment: * ssl.SSLContext() without a protocol argument * ssl.match_hostname() -- ___ Python tracker ___ ___

[issue43878] ./configure fails on Apple Silicon

Christian Heimes added the comment: It looks like we might be able to update the files after all. It's hard to say, though. The older tickets and commits for config.guess don't contain much context or explanation. -- ___ Python tracker

[issue43878] ./configure fails on Apple Silicon

Christian Heimes added the comment: The files are auto-generated by autoconf. The common Linux platforms do not have autoconf 2.71 yet. A large amount of core developers use Debian, Fedora, or Ubuntu. The latest releases of these distros only have autoconf 2.69. Until we can update, you have

[issue43879] Add native_thread_id to PyThreadState

Change by Gabriele N Tornetta : -- title: Add native_id to PyThreadState -> Add native_thread_id to PyThreadState ___ Python tracker ___ ___

[issue43879] Add native_id to PyThreadState

Change by Roundup Robot : -- keywords: +patch nosy: +python-dev nosy_count: 2.0 -> 3.0 pull_requests: +24184 stage: -> patch review pull_request: https://github.com/python/cpython/pull/25458 ___ Python tracker _

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

Christian Heimes added the comment: New changeset b8d0fa035d74ae6ae00794c9af636b427c5dc650 by Christian Heimes in branch 'master': bpo-43669: Remove OpenSSL 0.9 to 1.1.0 specific documentation (GH-25453) https://github.com/python/cpython/commit/b8d0fa035d74ae6ae00794c9af636b427c5dc650 -

[issue43880] 3.10 SSL module deprecations

Change by Christian Heimes : -- keywords: +patch pull_requests: +24183 stage: -> patch review pull_request: https://github.com/python/cpython/pull/25455 ___ Python tracker ___

[issue42248] Raised exception in Enum keeping user objects alive unnecessarily

Mark Dickinson added the comment: Thank you for the quick fix! -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscr

[issue43879] Add native_id to PyThreadState

Change by Shreyan Avigyan : -- nosy: +shreyanavigyan ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://

[issue43880] 3.10 SSL module deprecations

New submission from Christian Heimes : With PEP 644 accepted I can finally raise deprecation warnings for a lot of features that have been deprecated since Python 3.6 / 3.7 or by OpenSSL 1.1.1: * ssl.OP_NO_SSLv2 * ssl.OP_NO_SSLv3 * ssl.OP_NO_TLSv1 * ssl.OP_NO_TLSv1_1 * ssl.OP_NO_TLSv1_2 * ssl.

[issue28022] SSL releated deprecation for 3.6

Change by Christian Heimes : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue43522] SSLContext.hostname_checks_common_name appears to have no effect

Christian Heimes added the comment: Workaround has been added to upcoming 3.8 to 3.10 releases. Older versions will get fixed by next OpenSSL update. -- resolution: -> fixed stage: patch review -> resolved status: open -> closed type: -> behavior ___

[issue43871] urllib.parse.urlparse doesn't check port

Alexei Pastuchov added the comment: Thank you for your swift response and your willingness to add port validation to _checknetloc. I think the validation itself should compound both exceptional branches implemented in port[3] * port is an int * port is in the range [3] https://github.com/p

[issue40432] Pegen regenerate project for Windows not working

Jeremy Kloth added the comment: Adding windows team to the nosy list -- components: +Windows nosy: +jkloth, paul.moore, steve.dower, tim.golden, zach.ware ___ Python tracker _

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

Change by Christian Heimes : -- pull_requests: +24182 pull_request: https://github.com/python/cpython/pull/25453 ___ Python tracker ___

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

Christian Heimes added the comment: - Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check - Update hashopenssl to require OpenSSL 1.1.1 - multissltests only OpenSSL > 1.1.0 - ALPN is always supported - SNI is always supported - Remove deprecated NPN code. Python wrappers are no-op. - ECDH is always s

[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer

Christian Heimes added the comment: New changeset 39258d3595300bc7b952854c915f63ae2d4b9c3e by Christian Heimes in branch 'master': bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014) https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e --

[issue43522] SSLContext.hostname_checks_common_name appears to have no effect

Christian Heimes added the comment: New changeset f77ca86f75d5ad9b52e5f3cd19c0024b204b168c by Christian Heimes in branch '3.8': [3.8] bpo-43522: Fix SSLContext.hostname_checks_common_name (GH-24899) (GH-25452) https://github.com/python/cpython/commit/f77ca86f75d5ad9b52e5f3cd19c0024b204b168c

[issue43522] SSLContext.hostname_checks_common_name appears to have no effect

Christian Heimes added the comment: New changeset cdf02879790b8e52456df6e9d58fb8c0842fc359 by Christian Heimes in branch '3.9': [3.9] bpo-43522: Fix SSLContext.hostname_checks_common_name (GH-24899) (GH-25451) https://github.com/python/cpython/commit/cdf02879790b8e52456df6e9d58fb8c0842fc359

[issue43879] Add native_id to PyThreadState

New submission from Gabriele Tornetta : I would like to propose adding the native_id field to the PyThreadState structure to store the result of PyThread_get_thread_native_id. On some systems, like Linux, it is not easy to retrieve this information from outside of the Python interpreter proce

[issue43522] SSLContext.hostname_checks_common_name appears to have no effect

Change by Christian Heimes : -- pull_requests: +24180 pull_request: https://github.com/python/cpython/pull/25451 ___ Python tracker ___

[issue43522] SSLContext.hostname_checks_common_name appears to have no effect

Change by Christian Heimes : -- pull_requests: +24181 pull_request: https://github.com/python/cpython/pull/25452 ___ Python tracker ___

[issue43522] SSLContext.hostname_checks_common_name appears to have no effect

Christian Heimes added the comment: New changeset b467d9a24011992242c95d9157d3455f8a84466b by Christian Heimes in branch 'master': bpo-43522: Fix SSLContext.hostname_checks_common_name (GH-24899) https://github.com/python/cpython/commit/b467d9a24011992242c95d9157d3455f8a84466b -- _

[issue28254] Add C API for gc.enable, gc.disable, and gc.isenabled

da-woods added the comment: Cython currently does an elaborate process of importing the GC module and loading the "isenabled", "enable" and "disable" attributes each time it creates a cdef type https://github.com/cython/cython/blob/master/Cython/Utility/ExtensionTypes.c#L73-L107 Admittedly

[issue43860] unittest increment tests executed

Steve Kelem added the comment: Technically, you're right, however each domain his its own notion of what "adequate coverage" means. Some projects use software code coverage. I deal with integrated circuit observability/controllability, and stocastic functional testing. Until something, outs

[issue43871] urllib.parse.urlparse doesn't check port

Change by Senthil Kumaran : -- assignee: -> orsenthil versions: +Python 3.10 ___ Python tracker ___ ___ Python-bugs-list mailing li

[issue43871] urllib.parse.urlparse doesn't check port

Senthil Kumaran added the comment: Treating this as bug in itself might be a better idea than waiting for a ipv6 scope introduction, which had few caveats. > Would it be an improvement if _checknetloc[2] validates the value of port > properly? Yes, we could check if it is an int. That shou

[issue16221] tokenize.untokenize() "compat" mode misses the encoding when using an iterator

Irit Katriel added the comment: This was fixed here under issue719888. -- resolution: -> out of date stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue41943] unittest.assertLogs passes unexpectedly

Change by Irit Katriel : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed versions: +Python 3.10 -Python 3.8 ___ Python tracker ___ _

[issue43856] Docs for importlib.metadata should mention Python version

miss-islington added the comment: New changeset adf24bd835ed8f76dcc51aa98c8c54275e86965b by Zackery Spytz in branch 'master': bpo-43856: Add a versionadded directive to the importlib.metadata docs (GH-25445) https://github.com/python/cpython/commit/adf24bd835ed8f76dcc51aa98c8c54275e86965b

[issue14322] More test coverage for hmac

Change by Irit Katriel : -- keywords: +easy ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue10663] configure shouldn't set a default OPT

Change by Irit Katriel : -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Python