[issue15158] Add support for multi-character delimiters in csv

2012-06-23 Thread Ramchandra Apte
Ramchandra Apte added the comment: BTW, conincidentally just like the stackoverflow, even I want to split double pipes -- ___ Python tracker ___ ___

[issue15147] Remove packaging from the stdlib

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: Packaging removed in 576b8b182039. I’m going to wait an hour or two and in the absence of feedback will remove sysconfig.cfg too; that will be easy to revert if consensus was to keep it and I was not online (but I really think sysconfig.cfg should go). I’ll al

[issue15147] Remove packaging from the stdlib

2012-06-23 Thread Ramchandra Apte
Ramchandra Apte added the comment: Why are you removing packaging? -- nosy: +ramchandra.apte ___ Python tracker ___ ___ Python-bugs-l

[issue15147] Remove packaging from the stdlib

2012-06-23 Thread Ramchandra Apte
Ramchandra Apte added the comment: Oh.. understand now packaging is being deferred. -- ___ Python tracker ___ ___ Python-bugs-list ma

[issue15159] Add failover for follow_symlinks and effective_ids where possible

2012-06-23 Thread Larry Hastings
New submission from Larry Hastings : Serhiy Storchaka suggested (in private email, not on tracker or python-dev): why not make follow_symlinks and effective_ids failover where possible? Let's take the example of effective_ids first, that's simpler. Let's say the user calls os.access("x", os

[issue15118] uname and other os functions should return a struct sequence instead of a tuple

2012-06-23 Thread Larry Hastings
Larry Hastings added the comment: Attached is patch #3. Ned Deily advised me not to touch distutils, and packaging is in the process of being removed. So I backed out of my changes to those two packages. Apart from that the patch is the same as #2. Georg: mind if this goes in before freeze

[issue15118] uname and other os functions should return a struct sequence instead of a tuple

2012-06-23 Thread Larry Hastings
Larry Hastings added the comment: Whoops, here's the patch. -- Added file: http://bugs.python.org/file26123/larry.uname.and.times.structseq.3.diff ___ Python tracker ___ __

[issue14917] Make os.symlink on Win32 detect if target is directory

2012-06-23 Thread Larry Hastings
Larry Hastings added the comment: Patch attached. Implementation now uses GetFileAttributes (A or W) to determine whether or not src is a directory. Fixed docstring, docs, and updated Misc/NEWS. -- assignee: -> larry keywords: +patch nosy: +mhammond stage: needs patch -> patch revi

[issue14917] Make os.symlink on Win32 detect if target is directory

2012-06-23 Thread Larry Hastings
Larry Hastings added the comment: Note: I can't test this, as I only run Windows XP. But it compiles cleanly on Windows, and on Linux it compiles and passes the test suite fine. -- ___ Python tracker ___

[issue15016] Add special case for latin messages in email.mime.text

2012-06-23 Thread Dmitry Shachnev
Dmitry Shachnev added the comment: > This seems to be an enhancement sort of request rather than a bug... so I > wonder why Python 3.2 is listed? Fixed. > ... although I see nothing in the PEP about how to access that information > from Python. You are right, it seems there is no Python API

[issue14815] random_seed uses only 32-bits of hash on Win64

2012-06-23 Thread Larry Hastings
Larry Hastings added the comment: I got bored so I made you a patch. -- keywords: +patch Added file: http://bugs.python.org/file26125/larry.random_seed.ssize_t.1.diff ___ Python tracker ___

[issue15118] uname and other os functions should return a struct sequence instead of a tuple

2012-06-23 Thread Larry Hastings
Changes by Larry Hastings : -- assignee: -> larry stage: -> patch review type: -> behavior ___ Python tracker ___ ___ Python-bugs-l

[issue13590] extension module builds fail with python.org OS X installers on OS X 10.7 and 10.6 with Xcode 4.2

2012-06-23 Thread Roundup Robot
Roundup Robot added the comment: New changeset 796d9fc28e95 by Ned Deily in branch 'default': Issue #13590: Improve support for OS X Xcode 4: http://hg.python.org/cpython/rev/796d9fc28e95 -- ___ Python tracker ___

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: Can I suggest setting a “safe” attribute on the rmtree function object instead of adding another name to the module? -- nosy: +larry ___ Python tracker __

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Hynek Schlawack
Hynek Schlawack added the comment: I thought about that too but couldn't find a precedent (I didn't look very long though :)) where we've done that before so I went for an attribute. I'd change it immediately if others agree. -- ___ Python tracker

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Nick Coghlan
Nick Coghlan added the comment: I'm in the process of updating the LBYL support to use a "rmtree.avoids_symlink_attacks" function attribute rather than the "rmtree_is_safe" module level attribute. As I said in the hmac.secure_compare function discussion, the words "safe" and "secure" are too

[issue13512] ~/.pypirc created insecurely

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: Do you have links to those patches? -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubs

[issue14772] Return destination values in some shutil functions

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: Thanks! -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.o

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Hynek Schlawack
Hynek Schlawack added the comment: Excellent Nick! I discussed the very same thing with David yesterday but somehow we didn't come up with a good name. So we kept it on "safe" (which predates the secure discussion). -- ___ Python tracker

[issue15056] Have imp.cache_from_source() raise NotImplementedError when cache tag not available

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: > So sys.dont_write_bytecode is there to prevent bytecode writing but not > loading. Ah right. Providing a way to avoid reading them sounds good. > If you set sys.implementation.cache_tag to None you stop all bytecode usage > (reading and writing) This I feel u

[issue10053] Don’t close fd when FileIO.__init__ fails

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: I don’t know; Antoine is the io expert. I just remember that io used to be in C and was moved to _pyio for documentation and experimentation purposes, so I was sure it was a fully standalone lib but I could be mistaken. -- _

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Larry Hastings
Larry Hastings added the comment: Bikeshedding: (os.unlink in os.supports_dir_fd and os.open in os.supports_dir_fd) could be rewritten as { os.open, os.unlink } <= os.supports_dir_fd As you were! -- ___ Python tracker

[issue15056] Have imp.cache_from_source() raise NotImplementedError when cache tag not available

2012-06-23 Thread Eric Snow
Eric Snow added the comment: Brett meant the implementation would set it. You'd still expect it to not change values during the execution of the interpreter. I suppose anyone could change that value, but I'd see that more as a consenting adults situation. -- ___

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: The code using set operations seems slightly too cryptic for me, even though I’m comfortable with sets and functions as first-class objects. A matter of taste I guess. BTW it sounds a bit strange to me to have the verb in the singular in supports_dir_fd when i

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Roundup Robot
Roundup Robot added the comment: New changeset c2be81151994 by Nick Coghlan in branch 'default': Issue #4489: Rename the feature marker for the symlink resistant rmtree and store it as a function attribute http://hg.python.org/cpython/rev/c2be81151994 -- __

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Larry Hastings
Larry Hastings added the comment: > I guess it’s too late to propose “os.open.supports_dir_fd and > os.unlink.supports_dir_fd” (and I don’t know if that is feasible > with C functions) :) Where were you when "is_implemented" was being savagely torn apart last week? ;-) -- __

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: I was at work, and moving out of my apartment, and desperating at the subthreads spawned by my mail about packaging, and agreeing with the people being -1 on is_implemented on Signature objects :-) -- ___ Python track

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Nick Coghlan
Nick Coghlan added the comment: Éric - there's almost certainly going to be a PEP for 3.4 about doing this kind of feature advertisement in a cleaner and more consistent way. -- ___ Python tracker

[issue4489] shutil.rmtree is vulnerable to a symlink attack

2012-06-23 Thread Éric Araujo
Éric Araujo added the comment: Yep, that is promising. At worst we’ll have a new cool API and three obsolete sets in the os module, not a big deal. -- ___ Python tracker ___ __

[issue14815] random_seed uses only 32-bits of hash on Win64

2012-06-23 Thread Martin v . Löwis
Martin v. Löwis added the comment: LGTM -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.

<    1   2   3