[issue22207] Test for integer overflow on Py_ssize_t: explicitly cast to size_t

2014-09-30 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Gregory just has committed an equivalent of unicode_2.patch in a404bf4db6a6. -- nosy: +gregory.p.smith ___ Python tracker ___

[issue22207] Test for integer overflow on Py_ssize_t: explicitly cast to size_t

2014-09-30 Thread Gregory P. Smith
Gregory P. Smith added the comment: modify it as you see fit, i hadn't noticed this issue; just the warnings. -- ___ Python tracker ___ __

[issue22207] Test for integer overflow on Py_ssize_t: explicitly cast to size_t

2014-09-30 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Yes, these warning annoyed me too. But Victor's patch is purposed to check input data of public C API functions. -- ___ Python tracker ___ __

[issue22207] Test for integer overflow on Py_ssize_t: explicitly cast to size_t

2014-09-30 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Here is original Victor's patch synchronized with the tip. -- Added file: http://bugs.python.org/file36757/issue22207_unicode_3.patch ___ Python tracker _

[issue4093] add gc/memory management tests to pybench

2014-09-30 Thread Marc-Andre Lemburg
Marc-Andre Lemburg added the comment: I think it's better to keep pybench speed performance oriented and rather use a new tool for memory performance tests. I've recently done a lightning talk at PyCon UK on the subject and found the current tools we have for memory testing a bit underdevelope

[issue22207] Test for integer overflow on Py_ssize_t: explicitly cast to size_t

2014-09-30 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: I have reviewed the patch and found only few checks which looks good to me. Also I found two possible overflows (not fixed by the patch). All other changes looks redundant to me and just churn a code. -- ___ Pytho

[issue22448] call_at/call_later with Timer cancellation can result in (practically) unbounded memory usage.

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: Sorry, I'm coming later after the review and the commit, but I worry about performances of _run_once() since it's the core of asyncio. Yury proposed to only iterate once on self._scheduled when removing delayed calls, and I have the same concern. Here is a pa

[issue22396] AIX posix_fadvise and posix_fallocate

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 8e5e19b3cd4e by Victor Stinner in branch '3.4': Issue #22396: On 32-bit AIX platform, don't expose os.posix_fadvise() nor https://hg.python.org/cpython/rev/8e5e19b3cd4e New changeset 5ade1061fa3d by Victor Stinner in branch 'default': (Merge 3.4) Is

[issue22396] AIX posix_fadvise and posix_fallocate

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: > Or can we simply keep the function and skip the test? Usually, we prefer to not provide the function in Python if it is known to be broken. Other examples: - HAVE_BROKEN_POLL: don't declare select.poll() - HAVE_BROKEN_PTHREAD_SIGMASK: don't declare signal.pt

[issue5309] distutils doesn't parallelize extension module compilation

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: It looks like compilation of Python 3.5 fails on FreeBSD 6.4 because of the changeset bbe57429eba0a9ec21fb0f1178f409f1bba44c22: http://buildbot.python.org/all/builders/x86%20FreeBSD%206.4%203.x/builds/5061 Compile log: --- building '_ctypes' extension creatin

[issue22521] ctypes compilation fails on FreeBSD: Undefined symbol "ffi_call_win32"

2014-09-30 Thread STINNER Victor
New submission from STINNER Victor: On buildbots FreeBSD 6.4 and 7.2, the compilation of the ctypes module fails because the function "ffi_call_win32" is missing. I don't understand why a "win32" function would be needed on FreeBSD!? http://buildbot.python.org/all/builders/x86%20FreeBSD%207.2%

[issue11406] There is no os.listdir() equivalent returning generator instead of list

2014-09-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: I haven't really followed, but now that the PEP is accepted, what is the progress on this one? -- ___ Python tracker ___ __

[issue22521] ctypes compilation fails on FreeBSD: Undefined symbol "ffi_call_win32"

2014-09-30 Thread STINNER Victor
Changes by STINNER Victor : -- components: +ctypes keywords: +buildbot ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubs

[issue22521] ctypes compilation fails on FreeBSD: Undefined symbol "ffi_call_win32"

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: > I don't understand why a "win32" function would be needed on FreeBSD!? I see the function defined in libffi, but I don't see it used in the ctypes module. Note: the system libffi is not used, these buildbots compile the embedded version of libffi: "checking

[issue22522] sys.excepthook doesn't receive the traceback when called from code.InteractiveInterpreter

2014-09-30 Thread Claudiu Popa
New submission from Claudiu Popa: It seems that sys.excepthook doesn't receive the traceback when an error occurs during a code.InteractiveInterpreter run. The problem is here: https://hg.python.org/cpython/file/5ade1061fa3d/Lib/code.py#l168. last_tb was previously set to None right before. Th

[issue11406] There is no os.listdir() equivalent returning generator instead of list

2014-09-30 Thread Ben Hoyt
Ben Hoyt added the comment: Yes, PEP 471 has been accepted, and I've got a mostly-finished C implementation of os.scandir() for CPython 3.5, as well as tests and docs. If you want a sneak preview, see posixmodule_scandir*.c, test/test_scandir.py, and os.rst here: https://github.com/benhoyt/sca

[issue5309] distutils doesn't parallelize extension module compilation

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: There is a similar error on OpenIndiana buildbot, Python cannot be compiled since this build: http://buildbot.python.org/all/builders/AMD64%20OpenIndiana%203.x/builds/8664/steps/compile/logs/stdio gcc -fPIC -Wsign-compare -g -O0 -Wall -Wstrict-prototypes -I/u

[issue2202] urllib2 fails against IIS 6.0 (No support for MD5-sess auth)

2014-09-30 Thread Mathieu Dupuy
Mathieu Dupuy added the comment: But I think md5-sess should really be integrated. It's a standard mechanism described by a RFC (https://www.ietf.org/rfc/rfc2617.txt), and people need it, however insecure it may be (aren't other method (md5) insecure too ?). -- ___

[issue16038] ftplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- versions: -Python 3.1 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue18747] Re-seed OpenSSL's PRNG after fork

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- versions: -Python 3.1 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue16042] smtplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- versions: -Python 3.1 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue5309] distutils doesn't parallelize extension module compilation

2014-09-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: Thanks for noticing this. Looking at an old build, the ctypes and curses compile errors under OpenIndiana are not new: http://buildbot.python.org/all/builders/AMD64%20OpenIndiana%203.x/builds/8658/steps/compile/logs/stdio Simply, it seems that a ctypes compile

[issue22521] ctypes compilation fails on FreeBSD: Undefined symbol "ffi_call_win32"

2014-09-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: Those FreeBSD versions are totally obsolete, perhaps we should simply ignore any failures on them. -- nosy: +pitrou ___ Python tracker ___

[issue5309] distutils doesn't parallelize extension module compilation

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: > the ctypes and curses compile errors under OpenIndiana are not new FYI the compilation error of curses on OpenIndiana is *old*, at least 3 years old :-( http://bugs.python.org/issue13552 I just opened the issue #22521 for the compilation error of ctypes on F

[issue5309] distutils doesn't parallelize extension module compilation

2014-09-30 Thread Jonas Wagner
Jonas Wagner added the comment: I don't understand where this error comes from... The compilation commands are exactly the same in both the "before" and "after" logs. The order of commands is also the same. The only difference is this message: *** WARNING: renaming "_ssl" since importing

[issue16041] poplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- versions: -Python 3.1 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue16038] ftplib: unlimited readline() from connection

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 783e7b4375ac by Georg Brandl in branch '3.2': Issue #16038: CVE-2013-1752: ftplib: Limit amount of data read by https://hg.python.org/cpython/rev/783e7b4375ac -- ___ Python tracker

[issue16042] smtplib: unlimited readline() from connection

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 0f362676460d by Georg Brandl in branch '3.2': Issue #16042: CVE-2013-1752: smtplib: Limit amount of data read by https://hg.python.org/cpython/rev/0f362676460d -- ___ Python tracker

[issue16037] httplib: header parsing is unlimited

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset deee87d61436 by Georg Brandl in branch '3.2': Issue #16037: HTTPMessage.readheaders() raises an HTTPException when more than https://hg.python.org/cpython/rev/deee87d61436 -- ___ Python tracker

[issue16041] poplib: unlimited readline() from connection

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 76be07730f8d by Georg Brandl in branch '3.2': Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to https://hg.python.org/cpython/rev/76be07730f8d -- ___ Python tracker

[issue18709] SSL module fails to handle NULL bytes inside subjectAltNames general names (CVE-2013-4238)

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 386b0f478117 by Georg Brandl in branch '3.2': Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes https://hg.python.org/cpython/rev/386b0f478117 -- ___ Python tracker

[issue18747] Re-seed OpenSSL's PRNG after fork

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset bdf73458df5f by Christian Heimes in branch '3.2': Issue #18747: document issue with OpenSSL's CPRNG state and fork https://hg.python.org/cpython/rev/bdf73458df5f -- ___ Python tracker

[issue18709] SSL module fails to handle NULL bytes inside subjectAltNames general names (CVE-2013-4238)

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- status: open -> closed ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue17997] ssl.match_hostname(): sub string wildcard should not match IDNA prefix

2014-09-30 Thread Georg Brandl
Georg Brandl added the comment: Since it's been out in 3.2.x for so long, I won't apply this for 3.2 since at this point a behavior change might do more harm than good. -- resolution: -> fixed status: open -> closed versions: +Python 3.3, Python 3.4 -Python 3.2 ___

[issue18747] Re-seed OpenSSL's PRNG after fork

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- resolution: -> fixed status: open -> closed ___ Python tracker ___ ___ Python-bugs-list mailing list Uns

[issue16041] poplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- versions: -Python 3.2 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue16042] smtplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- versions: -Python 3.2 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue16038] ftplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- resolution: -> fixed status: open -> closed ___ Python tracker ___ ___ Python-bugs-list mailing list Uns

[issue21308] PEP 466: backport ssl changes

2014-09-30 Thread Matthias Klose
Matthias Klose added the comment: causing #22523, still referencing _ssl.sslwrap. -- nosy: +doko ___ Python tracker ___ ___ Python-bug

[issue22523] [regression] Lib/ssl.py still references _ssl.sslwrap

2014-09-30 Thread Matthias Klose
New submission from Matthias Klose: the backport in issue #21308 caused this regression. _ssl.sslwrap is still referenced in some files. -- components: Library (Lib) messages: 227896 nosy: alex, benjamin.peterson, christian.heimes, doko, dstufft, giampaolo.rodola, janssen, pitrou prior

[issue16037] httplib: header parsing is unlimited

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- resolution: -> fixed status: open -> closed ___ Python tracker ___ ___ Python-bugs-list mailing list Uns

[issue20218] Add methods to `pathlib.Path`: `write_text`, `read_text`, `write_bytes`, `read_bytes`

2014-09-30 Thread Matthias Troffaes
Matthias Troffaes added the comment: Chiming in here: Sphinx's testing framework does include a feature that allows easily read/write files into/from text/bytes directly from path-like objects. There is thus a demand out there. If this feature were to make it into stdlib, it would be loved at

[issue22523] [regression] Lib/ssl.py still references _ssl.sslwrap

2014-09-30 Thread Matthias Klose
Matthias Klose added the comment: forwarded from https://bugs.debian.org/762010 -- ___ Python tracker ___ ___ Python-bugs-list mailing

[issue20218] Add methods to `pathlib.Path`: `write_text`, `read_text`, `write_bytes`, `read_bytes`

2014-09-30 Thread Ram Rachum
Ram Rachum added the comment: Matthias: Do you prefer having both `write_bytes` and `write_text` instead of just `write` with a `binary` option? Do you prefer `append` and `exclusive` modes to be allowed or not? -- ___ Python tracker

[issue458343] distutils should zap .o as well as .so

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 94af1af93670 by Antoine Pitrou in branch 'default': Remove pointless "vile hack" that can cause the build step to fail when some extension modules can't be imported. https://hg.python.org/cpython/rev/94af1af93670 -- nosy: +python-dev _

[issue5309] distutils doesn't parallelize extension module compilation

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 94af1af93670 by Antoine Pitrou in branch 'default': Remove pointless "vile hack" that can cause the build step to fail when some extension modules can't be imported. https://hg.python.org/cpython/rev/94af1af93670 -- ___

[issue22456] __base__ undocumented

2014-09-30 Thread anupama srinivas murthy
anupama srinivas murthy added the comment: I have documented the function in object.rst file. I do not know the use of the function and have not mentioned that. My documentation is based on what I understood from the comments below and the explanation here: http://code.activestate.com/lists/pyt

[issue22419] wsgiref request length

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 0d115d14adfd by Georg Brandl in branch '3.2': Issue #22419: Limit the length of incoming HTTP request in wsgiref server to https://hg.python.org/cpython/rev/0d115d14adfd -- ___ Python tracker

[issue22517] BufferedRWpair doesn't clear weakrefs

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 4fa5239624b8 by Georg Brandl in branch '3.2': Issue #22517: When a io.BufferedRWPair object is deallocated, clear its https://hg.python.org/cpython/rev/4fa5239624b8 -- ___ Python tracker

[issue5309] distutils doesn't parallelize extension module compilation

2014-09-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: The change I just pushed should fix the failures, waiting for the buildbots to compile now. -- ___ Python tracker ___ __

[issue5309] distutils doesn't parallelize extension module compilation

2014-09-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: Looks ok on OpenIndiana, closing now. -- resolution: -> fixed status: open -> closed ___ Python tracker ___

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: > New changeset f86fde20e9ce by Benjamin Peterson in branch 'default': > merge 3.4 (closes #22518) > https://hg.python.org/cpython/rev/f86fde20e9ce This changeset added " other". It looks like you commited a conflict. -if (requiredsize<2*outsize) +

[issue20218] Add methods to `pathlib.Path`: `write_text`, `read_text`, `write_bytes`, `read_bytes`

2014-09-30 Thread Antoine Pitrou
Changes by Antoine Pitrou : -- nosy: +georg.brandl resolution: rejected -> status: closed -> open ___ Python tracker ___ ___ Python-b

[issue22519] integer overflow in computing byte's object representation

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: It would be nice to have a "bigmem" test checking that repr(b'\x00'*(2**30+1)) doesn't crash anymore. -- nosy: +haypo ___ Python tracker ___ __

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: It would be nice to add a bigmem test to check that repr('\x00'*(2**30+1)) doesn't crash anymore. -- ___ Python tracker ___ ___

[issue22520] integer overflow in computing unicode's object representation

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: It would be nice to add a bigmem test to check that repr('\x00'*(2**30+1)) doesn't crash anymore. -- nosy: +haypo resolution: fixed -> status: closed -> open ___ Python tracker _

[issue22519] integer overflow in computing byte's object representation

2014-09-30 Thread STINNER Victor
Changes by STINNER Victor : -- resolution: fixed -> status: closed -> open ___ Python tracker ___ ___ Python-bugs-list mailing list U

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: > It would be nice to add a bigmem test to check that repr('\x00'*(2**30+1)) > doesn't crash anymore. Ooops, wrong issue, the test is : ("\u" * (2**29)).encode("latin1", errors="xmlcharrefreplace"). -- ___ Pyth

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread STINNER Victor
Changes by STINNER Victor : -- resolution: fixed -> status: closed -> open ___ Python tracker ___ ___ Python-bugs-list mailing list U

[issue16037] httplib: header parsing is unlimited

2014-09-30 Thread Berker Peksag
Changes by Berker Peksag : -- stage: patch review -> resolved ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: h

[issue20218] Add methods to `pathlib.Path`: `write_text`, `read_text`, `write_bytes`, `read_bytes`

2014-09-30 Thread Georg Brandl
Georg Brandl added the comment: Note that these methods were already part of Jason's path.py when I imported it for use by Sphinx. I think these convenience methods are useful indeed, so if it is fine with your philosophy for pathlib, I'd be happy to see them there. The write_text/write_byte

[issue20218] Add methods to `pathlib.Path`: `write_text`, `read_text`, `write_bytes`, `read_bytes`

2014-09-30 Thread Matthias Troffaes
Matthias Troffaes added the comment: Thanks for the quick response. I agree with Georg on all points, i.e. longer function names and no extra options. -- ___ Python tracker ___

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: > I'm not sure that this change is correct. Why not raising an exception on > overflow? This is correct. This check prevents overflow. -- ___ Python tracker

[issue2399] Patches for Tools/msi

2014-09-30 Thread Berker Peksag
Changes by Berker Peksag : -- stage: needs patch -> resolved ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: htt

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: > This is correct. This check prevents overflow. Oh, I didn't understand that "requiredsize = 2*outsize;" is only used for performances, to overallocate the buffer. So I agree that it's fine to not overallocate if it would overflow. -- __

[issue21831] integer overflow in 'buffer' type allows reading memory

2014-09-30 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread STINNER Victor
Changes by STINNER Victor : -- type: crash -> security ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://

[issue22519] integer overflow in computing byte's object representation

2014-09-30 Thread STINNER Victor
Changes by STINNER Victor : -- type: crash -> security ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://

[issue22520] integer overflow in computing unicode's object representation

2014-09-30 Thread STINNER Victor
Changes by STINNER Victor : -- type: crash -> security ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://

[issue22517] BufferedRWpair doesn't clear weakrefs

2014-09-30 Thread STINNER Victor
Changes by STINNER Victor : -- type: crash -> security ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://

[issue22421] securing pydoc server

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 02dae04b3e2b by Georg Brandl in branch '3.2': Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all interfaces. https://hg.python.org/cpython/rev/02dae04b3e2b -- ___ Python tracker

[issue22448] call_at/call_later with Timer cancellation can result in (practically) unbounded memory usage.

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: > Turned out that single loop approach is not faster than loop+comprehension IMO it makes the code simpler and easier to understand. -- ___ Python tracker

[issue22448] call_at/call_later with Timer cancellation can result in (practically) unbounded memory usage.

2014-09-30 Thread Yury Selivanov
Yury Selivanov added the comment: > IMO it makes the code simpler and easier to understand. But it's a tad slower, like 2-3% ;) You can test it yourself, we only tested it on huge tasks list of 1M items. FWIW, I'm not opposed to your patch. -- ___

[issue22421] securing pydoc server

2014-09-30 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue22517] BufferedRWpair doesn't clear weakrefs

2014-09-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: It's an actual crash, AFAIK. -- type: security -> crash ___ Python tracker ___ ___ Python-bugs-list

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread Georg Brandl
Georg Brandl added the comment: Benjamin, could you make a patch for 3.2 as well? -- nosy: +georg.brandl ___ Python tracker ___ ___ Py

[issue20994] Disable TLS Compression

2014-09-30 Thread Georg Brandl
Georg Brandl added the comment: I wouldn't consider this important enough for 3.2; since it lacks the means to do the opt-back-in. -- nosy: +georg.brandl versions: -Python 3.2 ___ Python tracker _

[issue22518] integer overflow in encoding unicode

2014-09-30 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: > Ooops, wrong issue, the test is : ("\u" * (2**29)).encode("latin1", > errors="xmlcharrefreplace"). ("\u" * (sys.maxsize//8+1)).encode("latin1", errors="xmlcharrefreplace") or ("\xff" * (sys.maxsize//6+1)).encode("ascii", errors="xmlcharrefreplace")

[issue16039] imaplib: unlimited readline() from connection

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 5d1c03316af7 by Georg Brandl in branch '3.2': Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to limit https://hg.python.org/cpython/rev/5d1c03316af7 -- ___ Python tracker

[issue16039] imaplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- versions: -Python 3.1, Python 3.2 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue20218] Add methods to `pathlib.Path`: `write_text`, `read_text`, `write_bytes`, `read_bytes`

2014-09-30 Thread Georg Brandl
Georg Brandl added the comment: Next try. -- Added file: http://bugs.python.org/file36761/pathlib_readwrite_v5.patch ___ Python tracker ___ __

[issue16039] imaplib: unlimited readline() from connection

2014-09-30 Thread STINNER Victor
STINNER Victor added the comment: > New changeset 5d1c03316af7 by Georg Brandl in branch '3.2': > Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to limit > https://hg.python.org/cpython/rev/5d1c03316af7 I'm not sure that this change is correct, the test failed on Windows.

[issue16039] imaplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Georg Brandl added the comment: Let me check that. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://m

[issue11406] There is no os.listdir() equivalent returning generator instead of list

2014-09-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: > Given that os.scandir() will solve this issue (as well as the bigger > performance problem due to listdir throwing away file type info), can we > close this issue and open another one to track the implementation of > os.scandir() / PEP 471? This makes sense

[issue22448] call_at/call_later with Timer cancellation can result in (practically) unbounded memory usage.

2014-09-30 Thread Yury Selivanov
Yury Selivanov added the comment: Victor, During the code review we tried the single loop approach. At the end Joshua wrote a small benchmark to test if it's really faster to do it in one loop or not. Turned out that single loop approach is not faster than loop+comprehension (but it's not muc

[issue20939] test_geturl of test_urllibnet fails with 'https://www.python.org/' != 'http://www.python.org/'

2014-09-30 Thread Roundup Robot
Roundup Robot added the comment: New changeset 97c329849ef3 by Ned Deily in branch '3.2': Issue #20939: Use www.example.com instead of www.python.org to avoid test https://hg.python.org/cpython/rev/97c329849ef3 -- ___ Python tracker

[issue16039] imaplib: unlimited readline() from connection

2014-09-30 Thread Arfrever Frehtes Taifersar Arahesis
Arfrever Frehtes Taifersar Arahesis added the comment: This error is rather related to issue #16042, not issue #16039. -- ___ Python tracker ___ _

[issue16039] imaplib: unlimited readline() from connection

2014-09-30 Thread Georg Brandl
Changes by Georg Brandl : -- resolution: -> fixed status: open -> closed ___ Python tracker ___ ___ Python-bugs-list mailing list Uns

[issue14156] argparse.FileType for '-' doesn't work for a mode of 'rb'

2014-09-30 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- stage: -> test needed type: crash -> behavior versions: -Python 3.2, Python 3.3 ___ Python tracker ___

[issue16042] smtplib: unlimited readline() from connection

2014-09-30 Thread Arfrever Frehtes Taifersar Arahesis
Arfrever Frehtes Taifersar Arahesis added the comment: New changeset 4065c4539fcb by Georg Brandl in branch '3.2': Fix-up for 0f362676460d: add missing size argument to SSLFakeFile.readline(), as in 2.6 backport https://hg.python.org/cpython/rev/4065c4539fcb --

[issue22524] PEP 471 implementation: os.scandir() directory scanning function

2014-09-30 Thread Ben Hoyt
New submission from Ben Hoyt: Opening this to track the implementation of PEP 471: os.scandir() [1]. This supercedes Issue #11406 (and possibly others)? The implementation is most of the way there, but not yet done as a CPythono 3.5 patch. Before I have a proper patch, it's available on GitHub

[issue11406] There is no os.listdir() equivalent returning generator instead of list

2014-09-30 Thread Ben Hoyt
Ben Hoyt added the comment: Okay, I've opened http://bugs.python.org/issue22524, but I don't have the permissions to close this one, so could someone with bugs.python.org superpowers please do that? -- ___ Python tracker

[issue19529] Fix unicode_aswidechar() with 4byte unicode and 2byte wchar_t, for AIX

2014-09-30 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Georg, what is your decision? -- nosy: +serhiy.storchaka stage: -> commit review ___ Python tracker ___ _

[issue11406] There is no os.listdir() equivalent returning generator instead of list

2014-09-30 Thread Nick Coghlan
Nick Coghlan added the comment: This approach has been rejected in favour of the accepted PEP 471 proposal to add os.scandir() (issue #22524) -- resolution: -> rejected stage: needs patch -> resolved status: open -> closed superseder: -> PEP 471 implementation: os.scandir() directory

[issue19529] Fix unicode_aswidechar() with 4byte unicode and 2byte wchar_t, for AIX

2014-09-30 Thread Georg Brandl
Georg Brandl added the comment: Looks obvious and is potentially a security fix, so it can/should go in. Please add a NEWS entry. -- ___ Python tracker ___

[issue22524] PEP 471 implementation: os.scandir() directory scanning function

2014-09-30 Thread Giampaolo Rodola'
Changes by Giampaolo Rodola' : -- nosy: +giampaolo.rodola ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https

[issue22472] OSErrors should use str and not repr on paths

2014-09-30 Thread Akira Li
Akira Li added the comment: I meant, in general, repr() is better for an error message because it should be unambigous unlike str() but in your particular case you could use filename attribute to format the way you like it for your UI. -- ___ Python t

[issue19529] Fix unicode_aswidechar() with 4byte unicode and 2byte wchar_t, for AIX

2014-09-30 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue22472] OSErrors should use str and not repr on paths

2014-09-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: Also, the repr() makes it easier to copy-paste in Python code (e.g. on the prompt). -- nosy: +pitrou ___ Python tracker ___ ___

[issue22448] call_at/call_later with Timer cancellation can result in (practically) unbounded memory usage.

2014-09-30 Thread Yury Selivanov
Yury Selivanov added the comment: Victor, I've done some additional testing. Here's a test that Joshua wrote for the code review: https://gist.github.com/1st1/b38ac6785cb01a679722 It appears that single loop approach works a bit faster for smaller collections of tasks. On a list of 1 task

  1   2   3   >