[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: How did you get this file? -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscr

[issue27154] Regression in file.writelines behavior

2020-07-06 Thread Terry J. Reedy
Terry J. Reedy added the comment: Removing 'b' and 'u', writelines([s]) and write(s) both now read as s. -- nosy: +terry.reedy resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker

[issue26212] Python with ncurses6.0 will not load _curses module on Solaris 10

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Pyth

[issue34154] Tkinter __init__ documentations sometimes missing valid keyword values

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- versions: +Python 3.10 -Python 2.7, Python 3.6, Python 3.7, Python 3.8 ___ Python tracker ___ ___ Pyth

[issue34908] netrc parsing is overly strict

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- versions: +Python 3.10 -Python 2.7, Python 3.7 ___ Python tracker ___ ___ Python-bugs-list mailing lis

[issue22433] Argparse considers unknown optional arguments with spaces as a known positional argument

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- versions: +Python 3.10 -Python 2.7 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscrib

[issue13554] Tkinter doesn't use higher resolution app icon

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- resolution: -> third party stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Pyth

[issue39189] Use io.DEFAULT_BUFFER_SIZE for filecmp BUFSIZE variable

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- versions: +Python 3.10 -Python 2.7, Python 3.5, Python 3.6, Python 3.7, Python 3.8 ___ Python tracker ___ ___

[issue37363] Additional PEP578 hooks

2020-07-06 Thread Stéphane Wirtel
Stéphane Wirtel added the comment: Hi @Christian, When you have time for my last question. Thank you, -- ___ Python tracker ___ __

[issue27578] inspect.findsource raises exception with empty __init__.py

2020-07-06 Thread Terry J. Reedy
Terry J. Reedy added the comment: I agree that getsource raising is a bug. I would more at the behavior and doc for getlines before I decided about that. -- nosy: +terry.reedy versions: -Python 2.7, Python 3.5, Python 3.6, Python 3.9 ___ Python t

[issue41217] Obsolete note for default asyncio event loop on Windows

2020-07-06 Thread Csaba Nemes
New submission from Csaba Nemes : In the documentation of asyncio, a Note is present in the "Running Subprocesses" section: "The default asyncio event loop on Windows does not support subprocesses", however, from 3.8 the default event loop is ProactorEventLoop on Windows, that does support su

[issue24670] os.chdir breaks result of os.path.abspath(__file__) and os.path.realpath(__file__)

2020-07-06 Thread Terry J. Reedy
Terry J. Reedy added the comment: I interpret Serhiy's comment as 'not a bug'. In any case, the linked issue changed __file__ to an absolute path, and 2.7 is frozen. -- nosy: +terry.reedy resolution: -> not a bug stage: -> resolved status: open -> closed __

[issue11105] Compiling evil ast crashes interpreter

2020-07-06 Thread Terry J. Reedy
Terry J. Reedy added the comment: With 3.9 on Windows, using Benjamin's example, I do not get the Windows equivalent of a seg fault. However, execution stops at compile with no exception, including SystemExit. These examples amount to limited fuzz testing of compile(). I think it should r

[issue23885] urllib.quote horribly mishandles unicode as second parameter

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Pyth

[issue20353] Hanging bug with multiprocessing + sqlite3 + tkinter (OS X 10.9 only)

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker ___ ___ Pyth

[issue17576] PyNumber_Index() is not int-subclass friendly (or operator.index() docos lie)

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- versions: +Python 3.10, Python 3.9 -Python 2.7, Python 3.3, Python 3.4 ___ Python tracker ___ ___ Pyth

[issue34689] Lib/sysconfig.py expands non-variables

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- nosy: +berker.peksag, serhiy.storchaka versions: +Python 3.10 -Python 2.7, Python 3.5, Python 3.6, Python 3.7, Python 3.8 ___ Python tracker ___

[issue34938] Fix mimetype.init() to account for from import

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- versions: +Python 3.10 -Python 2.7, Python 3.7, Python 3.8, Python 3.9 ___ Python tracker ___ ___ Pyth

[issue41212] Emoji Unicode failing in standard release of Python 3.8.3 / tkinter 8.6.8

2020-07-06 Thread E. Paine
E. Paine added the comment: Sorry, the point I was trying to make was that, unlike UTF-8, Tcl doesn't support variable length characters and they are instead fixed at 16 bits (by default). So, while Python and UTF-8 are perfectly happy with the emoji, unless Tcl is compiled with a particular

[issue41206] behaviour change with EmailMessage.set_content

2020-07-06 Thread Matthias Klose
Change by Matthias Klose : -- nosy: +ivyl ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python

[issue41206] behaviour change with EmailMessage.set_content

2020-07-06 Thread Matthias Klose
Matthias Klose added the comment: that's a regression for the 3.8 branch, marking as a release blocker for 3.8.4. This should be a documented change for 3.9, and probably reverted/fixed for 3.8. -- keywords: +3.8regression, 3.9regression nosy: +doko, lukasz.langa priority: normal ->

[issue40275] test.support has way too many imports

2020-07-06 Thread STINNER Victor
STINNER Victor added the comment: New changeset 883bc638335a57a6e6a6344c2fc132c4f9a0ec42 by Hai Shi in branch 'master': bpo-40275: Use new test.support helper submodules in tests (GH-21314) https://github.com/python/cpython/commit/883bc638335a57a6e6a6344c2fc132c4f9a0ec42 -- ___

[issue40275] test.support has way too many imports

2020-07-06 Thread STINNER Victor
STINNER Victor added the comment: New changeset a089d21df1ea502b995d8e8a3bcc937cce030802 by Hai Shi in branch 'master': bpo-40275: Use new test.support helper submodules in tests (GH-21315) https://github.com/python/cpython/commit/a089d21df1ea502b995d8e8a3bcc937cce030802 -- ___

[issue40204] Docs build error with Sphinx 3.0 due to invalid C declaration

2020-07-06 Thread Matthias Klose
Matthias Klose added the comment: please note that pinning usually is not a solution for Linux distributions. Yes, the most wanted fix would be to fix sphinx 3.x not to break compatibility with 2.x. Or limit 3.9 to 2.x features for now. -- nosy: +doko _

[issue11105] Compiling evil ast crashes interpreter

2020-07-06 Thread Batuhan Taskaya
Batuhan Taskaya added the comment: > With 3.9 on Windows, using Benjamin's example, I do not get the Windows > equivalent of a seg fault. However, execution stops at compile with no > exception, including SystemExit. I can still reproduce on Linux, $ python Python 3.10.0a0 (heads/bpo-

[issue28681] Clarify multiple function names in the tutorial

2020-07-06 Thread Terry J. Reedy
Change by Terry J. Reedy : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___ __

[issue26205] Better specify number of nested scopes

2020-07-06 Thread Terry J. Reedy
Terry J. Reedy added the comment: Since you ask, here is a extended summary of namespaces. There is one built-in namespace. There is one global namespace for each module, which is also the local namespace for top level code in that module. There is one local namespace for each class and fu

[issue41210] LZMADecompressor.decompress(FORMAT_RAW) truncate output when input is paticular LZMA+BCJ data

2020-07-06 Thread Ma Lin
Ma Lin added the comment: The docs[1] said: Compression filters: FILTER_LZMA1 (for use with FORMAT_ALONE) FILTER_LZMA2 (for use with FORMAT_XZ and FORMAT_RAW) But your code uses a combination of `FILTER_LZMA1` and `FORMAT_RAW`, is this ok? [1] https://docs.python.

[issue26205] Better specify number of nested scopes

2020-07-06 Thread Terry J. Reedy
Terry J. Reedy added the comment: Besides the sentence now revised, the initial post referenced confusion with 'middle scope' in "If a name is declared global, then all references and assignments go directly to the middle scope containing the module's global names." This has not been direct

[issue41018] warning: 'Tk_MainWindow' is deprecated: first deprecated

2020-07-06 Thread Ronald Oussoren
Ronald Oussoren added the comment: The deprecation warnings are a specific "feature" of the copy of Tcl/Tk shipped by Apple, and do not reflect the status of this API upstream. The correct fix is to either ignore these warnings when building, or better to use a different install of Tcl/Tk (l

[issue41212] Emoji Unicode failing in standard release of Python 3.8.3 / tkinter 8.6.8

2020-07-06 Thread Ben Griffin
Ben Griffin added the comment: Wow, well if you are right, then TCL/TK is a showstopper for us, and we will have to consider an alternative to tkinter. Frankly, I am aghast that any active software would be limited to fixed width characters. We moved our languages over to multiwidth (utf-8)

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: I tried compiling Python 3.10 with XLC on AIX and I get a crash in a different place that does not involve the parser: _PyEval_EvalFrameDefault(tstate = 0x200764e0, f = 0x300b5190, throwflag = 0), line 427 in "object.h" _PyEval_EvalCode(tstate = 0x100

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: If I check out commit c5fc15685202cda73f7c3f5c6f299b0945f58508 I get a crash, but not on master or 3.9 HEAD. So whatever error happens with XLC in the PEG parser c5fc15685202cda73f7c3f5c6f299b0945f58508 seems that is already solved. Could you confirm

[issue18080] setting CC no longer overrides default linker for extension module builds on OS X

2020-07-06 Thread Ned Deily
Ned Deily added the comment: > Would you like me to file a separate bug for this issue? Or apply that patch? > Or something else? OK, if I understand correctly, the problem you describe does not affect cPython because cPython's Distutils does not use get_config_vars(), only get_config_var()

[issue40874] Update to libmpdec-2.5.0

2020-07-06 Thread Stefan Krah
Stefan Krah added the comment: As noted in the first message of this thread, the sqrt-max-prec feature (requested by Mark and Tim) was already in 3.9 long before the beta freeze. I'm not sure why this is not clear from the original message. That fix is safe for Python, but not for the standal

[issue40874] Update to libmpdec-2.5.0

2020-07-06 Thread Stefan Krah
Stefan Krah added the comment: > The standalone libmpdec had to be updated, and was updated according to the Debian-friendly way requested by Matthias himself. Not updated, of course the sqrt-max-prec *had never been* in the standalone libmpdec, it is new in 2.5.0. -- ___

[issue37207] Use PEP 590 vectorcall to speed up calls to range(), list() and dict()

2020-07-06 Thread Łukasz Langa
Łukasz Langa added the comment: New changeset b4a9263708cc67c98c4d53b16933f6e5dd07990f by Dong-hee Na in branch 'master': bpo-37207: Update whatsnews for 3.9 (GH-21337) https://github.com/python/cpython/commit/b4a9263708cc67c98c4d53b16933f6e5dd07990f -- nosy: +lukasz.langa _

[issue37207] Use PEP 590 vectorcall to speed up calls to range(), list() and dict()

2020-07-06 Thread miss-islington
Change by miss-islington : -- pull_requests: +20494 pull_request: https://github.com/python/cpython/pull/21347 ___ Python tracker ___ __

[issue40874] Update to libmpdec-2.5.0

2020-07-06 Thread Christian Heimes
Change by Christian Heimes : -- nosy: -christian.heimes ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http

[issue40874] Update to libmpdec-2.5.0

2020-07-06 Thread Stefan Krah
Stefan Krah added the comment: More than that, I had *promised* Matthias privately to release a new libmpdec for the sqrt-max-prec feature a couple of months ago. I request that further packaging issues will be dealt with primarily by Matthias and myself. -- _

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: Ok, I have investigated more and it seems that XLC is miscompiling the keyword list. For instance, if you add: index 9d3ac575df..70d431e6be 100644 --- a/Parser/pegen/parse.c +++ b/Parser/pegen/parse.c @@ -1,6 +1,6 @@ -// @generated by pegen.py from ./G

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: Ok, this is definitively something going on with XLC. This patch solves the segfault: diff --git a/Parser/pegen/parse.c b/Parser/pegen/parse.c index 9d3ac575df..e5511bf815 100644 --- a/Parser/pegen/parse.c +++ b/Parser/pegen/parse.c @@ -1,6 +1,6 @@ -//

[issue41206] behaviour change with EmailMessage.set_content

2020-07-06 Thread Łukasz Langa
Łukasz Langa added the comment: Good catch! No need to revert anything. The raised ValueError is a relatively simple thing to fix. xtreak, mind making a follow-up PR to restore behavior with no \n characters? -- ___ Python tracker

[issue41207] distutils.command.build_ext raises FileNotFoundError

2020-07-06 Thread Łukasz Langa
Łukasz Langa added the comment: Good catch! The unification change is 3.10 only but I'm totally fine accepting the _compile fix in Python 3.9. -- ___ Python tracker ___ __

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread STINNER Victor
STINNER Victor added the comment: According to the Python Security Model, this issue is not security vulnerability: (*) https://python-security.readthedocs.io/security.html#python-security-model The marshal is not intended to be used to load untrusted code. That's why its documentation conta

[issue41206] behaviour change with EmailMessage.set_content

2020-07-06 Thread Karthikeyan Singaravelan
Karthikeyan Singaravelan added the comment: Sure, I guess the fix would be to check for lines to be non-empty before doing a call to max and also convert the report as a test case? -- ___ Python tracker ___

[issue41207] distutils.command.build_ext raises FileNotFoundError

2020-07-06 Thread STINNER Victor
STINNER Victor added the comment: > Programs trapping CompileError but not FileNotFoundError will crash where > once they had error handling. Do you mean mean that spawn() of distutils.spawn should catch FileNotFoundError and raise a CompilerError instead? It seems like before my commit 1ec

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Iman Sharafodin
Iman Sharafodin added the comment: What about patching that as a crash? -- ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Iman Sharafodin
Iman Sharafodin added the comment: By using our proprietary fuzzer. I'm a cybersecurity researcher. -- ___ Python tracker ___ ___ P

[issue36302] distutils creates unreproducible .so files

2020-07-06 Thread STINNER Victor
STINNER Victor added the comment: > An unfortunate side effect of this change is that changes the build order > even if the source list order is relevant. That sounds like a new feature. I don't think that it was supported previously. Or maybe it was more an implementation detail. Please o

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread STINNER Victor
STINNER Victor added the comment: Python doesn't implement any protection against invalid PYC files to avoid any performance overhead at runtime. Maybe we can close this issue as WONTFIX. -- ___ Python tracker

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: This is enough to reproduce the problem: #include typedef struct { char *str; int type; } KeywordToken; static KeywordToken *the_array[] = { NULL, NULL, (KeywordToken[]) { {"if", 510}, {"in", 518}, {"as", 520}

[issue40275] test.support has way too many imports

2020-07-06 Thread STINNER Victor
STINNER Victor added the comment: New changeset deb016224cc506503fb05e821a60158c83918ed4 by Hai Shi in branch 'master': bpo-40275: Use new test.support helper submodules in tests (GH-21317) https://github.com/python/cpython/commit/deb016224cc506503fb05e821a60158c83918ed4 -- ___

[issue41206] behaviour change with EmailMessage.set_content

2020-07-06 Thread Karthikeyan Singaravelan
Karthikeyan Singaravelan added the comment: There is a behavior change with my fix. 7bit is returned for Content-Transfer-Encoding before commit and skipping the heuristic if line is empty to avoid ValueError will return quoted-printable for Content-Transfer-Encoding. This is a behavior chan

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Change by Pablo Galindo Salgado : -- Removed message: https://bugs.python.org/msg373107 ___ Python tracker ___ ___ Python-bugs-list

[issue9348] Calling argparse's add_argument with the wrong number of metavars causes delayed error message

2020-07-06 Thread daniel hahler
daniel hahler added the comment: This adds overhead, since it creates a formatter and uses it for formatting only for validation purposes. I think it is better to only have the error when the formatter is actually used (i.e. the help is displayed - which is not the typical use case, and it s

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: This is enough to reproduce the problem: #include typedef struct { char *str; int type; } KeywordToken; static KeywordToken *the_array[] = { NULL, NULL, (KeywordToken[]) { {"if", 510}, {"in", 518}, {"as", 520}

[issue41206] behaviour change with EmailMessage.set_content

2020-07-06 Thread Łukasz Langa
Łukasz Langa added the comment: Yes. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.o

[issue41216] eval don't load local variable in dict and list comprehensions.

2020-07-06 Thread Eric V. Smith
Eric V. Smith added the comment: Agreed that this is a duplicate, so I'm closing it. -- nosy: +eric.smith resolution: -> duplicate stage: -> resolved status: open -> closed superseder: -> eval() function in List Comprehension doesn't work ___ Pyt

[issue41206] behaviour change with EmailMessage.set_content

2020-07-06 Thread Karthikeyan Singaravelan
Change by Karthikeyan Singaravelan : -- keywords: +patch pull_requests: +20495 stage: -> patch review pull_request: https://github.com/python/cpython/pull/21349 ___ Python tracker ___

[issue37207] Use PEP 590 vectorcall to speed up calls to range(), list() and dict()

2020-07-06 Thread Dong-hee Na
Change by Dong-hee Na : -- pull_requests: +20496 pull_request: https://github.com/python/cpython/pull/21350 ___ Python tracker ___ _

[issue41206] behaviour change with EmailMessage.set_content

2020-07-06 Thread Karthikeyan Singaravelan
Karthikeyan Singaravelan added the comment: Łukasz, There is already a PR open for this from May linking to original issue at https://github.com/python/cpython/pull/20542 . I missed it during triaging this issue. I guess someone needs to approve that PR and merge it to master to backport to 3

[issue37207] Use PEP 590 vectorcall to speed up calls to range(), list() and dict()

2020-07-06 Thread Dong-hee Na
Dong-hee Na added the comment: New changeset 97558d6b08a656eae209d49b206f703cee0359a2 by Dong-hee Na in branch '3.9': [3.9] bpo-37207: Update whatsnews for 3.9 (GH-21337) https://github.com/python/cpython/commit/97558d6b08a656eae209d49b206f703cee0359a2 -- __

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Christian Heimes
Christian Heimes added the comment: Python's thread model is: If an attacker can create a malicious PYC file and feed it to a Python process, then they already have full code execution privileges. There is no need to exploit a segfault. Because the marshal module should only be used for PYC

[issue36302] distutils creates unreproducible .so files

2020-07-06 Thread Ronald Oussoren
Ronald Oussoren added the comment: That's the problem with any change to distutils, the API is unclear and that causes any change to be potentially breaking for existing users. That's why distutils has been mostly stagnant for years. I have no particular wish w.r.t. changing behaviour, I've

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Iman Sharafodin
Iman Sharafodin added the comment: I thought it's like Pickle. Then if we find an exploitable segfault just in Pickle, you would count it as a threat? -- ___ Python tracker _

[issue41177] ConvertingList and ConvertingTuple lack iterators and ConvertingDict lacks items()

2020-07-06 Thread Vinay Sajip
Vinay Sajip added the comment: > If it is not goal I don't have a goal to make these part of a documented API. OP, can you share a use case where you need to iterate over these internal structures? -- ___ Python tracker

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Michael Felt
Michael Felt added the comment: Glad you figured it out! I doubt I would have. Thx!! On 06/07/2020 14:37, Pablo Galindo Salgado wrote: > Pablo Galindo Salgado added the comment: > > This is enough to reproduce the problem: > > #include > > typedef struct { > char *str; > int type; >

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: No, unlike to marshal the pickle format is a Turing-complete language. Just loading pickle data can cause to execution of arbitrary code. marshal is more "safe" in this regard -- in worst case you can just crash when load it. It may be interesting to make

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: > Glad you figured it out! Well, this is not over ;) We should confirm that this is either a bug in XLC or a violation of C99 -- ___ Python tracker

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Christian Heimes
Christian Heimes added the comment: Yes, it's like pickle, but it is not like you think. The pickle module has a similar security disclaimer, https://docs.python.org/dev/library/pickle.html . We might agree to fix segfaults in unpickler code if the fix is simple and does not cause backwards

[issue26205] Better specify number of nested scopes

2020-07-06 Thread Eryk Sun
Eryk Sun added the comment: > There is one local namespace for each class and function. There is one > nonlocal namespace for each nested function. In the first sentence, replace "class" with "class statement" and "function" with "function call". The second sentence could use "nested-functio

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: In this particular case unmarshalling creates a tuple containing a reference to itself which is used as a key in a dict. Calculating a hash of such tuple leads to infinite recursion which overflows the programming stack. There is no efficient way to detect

[issue41177] ConvertingList and ConvertingTuple lack iterators and ConvertingDict lacks items()

2020-07-06 Thread Brett Hannigan
Brett Hannigan added the comment: I encountered the need for the iterators when trying to create a subclass of the QueueHandler class that would manage both the QueueHandler and the QueueListener. The implementation is very similar to that described in this Medium post: https://medium.com/@r

[issue41218] PyCF_ALLOW_TOP_LEVEL_AWAIT + list comprehension set .CO_COROUTINE falg.

2020-07-06 Thread Matthias Bussonnier
New submission from Matthias Bussonnier : As far as I can tell sometime in 3.8.x (likely 3.8.3) the following snippet changed result: import ast import inspect cell = '[x for x in l]' code = compile(cell, "<>", "exec", flags=getattr(ast,'PyCF_ALLOW_TOP_LEVEL_AWAIT', 0x0))

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Iman Sharafodin
Iman Sharafodin added the comment: It's interesting that you would not count a critical segfault in Pickle as a threat, because there are numerous libraries that are Unpickling untrusted user data (even-though some of them are using RestrictedUnpickler to protect themselves but a segfault wo

[issue39562] Asynchronous comprehensions don't work in asyncio REPL

2020-07-06 Thread Matthias Bussonnier
Matthias Bussonnier added the comment: This make non-await list comprehension coroutine-code-objects as well: https://bugs.python.org/issue41218 import ast import inspect cell = '[x for x in l]' code = compile(cell, "<>", "exec", flags=getattr(ast,'PyCF_ALLOW_TOP_LEVEL_AWAIT

[issue41218] PyCF_ALLOW_TOP_LEVEL_AWAIT + list comprehension set .CO_COROUTINE falg.

2020-07-06 Thread Matthias Bussonnier
Matthias Bussonnier added the comment: (crossref https://github.com/ipython/ipython/issues/12422) -- ___ Python tracker ___ ___ Pyt

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Christian Heimes
Christian Heimes added the comment: That line in Ray Project is a potential arbitrary code execution vulnerability. If an attacker is able to inject a custom pickle stream, then they can easily take over the service. Please report the issue to the project. It might be a simple score of a CVE

[issue39562] Asynchronous comprehensions don't work in asyncio REPL

2020-07-06 Thread Pablo Galindo Salgado
Change by Pablo Galindo Salgado : -- resolution: fixed -> status: closed -> open ___ Python tracker ___ ___ Python-bugs-list mailin

[issue39562] Asynchronous comprehensions don't work in asyncio REPL

2020-07-06 Thread Pablo Galindo Salgado
Change by Pablo Galindo Salgado : -- priority: -> release blocker ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscr

[issue41177] ConvertingList and ConvertingTuple lack iterators and ConvertingDict lacks items()

2020-07-06 Thread Vinay Sajip
Vinay Sajip added the comment: OK, seems like a reasonable use case. I haven't looked at the PR yet, as it still has a "CLA not signed" label, and I normally wait until the CLA is signed before looking more closely at PRs. -- ___ Python tracker <

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Michael Felt
Michael Felt added the comment: On 06/07/2020 16:35, Pablo Galindo Salgado wrote: > Pablo Galindo Salgado added the comment: > >> Glad you figured it out! > Well, this is not over ;) > > We should confirm that this is either a bug in XLC or a violation of C99 probably a bug (that they might c

[issue41177] ConvertingList and ConvertingTuple lack iterators and ConvertingDict lacks items()

2020-07-06 Thread Brett Hannigan
Brett Hannigan added the comment: Thanks. I don't know why it still says CLA not signed - I signed it a week ago, but I'll try to figure that out this week. -- ___ Python tracker __

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread David Edelsohn
David Edelsohn added the comment: I don't believe that this is an XLC bug, but I suspect that it is undefined behavior / implementation-defined behavior. I suspect that this is tripping over AIX/XLC null behavior. AIX specifically and intentionally maps the first page of memory at address 0

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Michael Felt
Michael Felt added the comment: I tried check.c and check_bad.c using xlc-v11 (on my POWER6) - and the results were the same as in Pablo's entry. On the gcc119 host - using the v13 compiler, check_bad does not crash. Not gotten to testing xlc-v16 yet. I have seen lots of options today - wheil

[issue29778] _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath

2020-07-06 Thread miss-islington
Change by miss-islington : -- pull_requests: +20497 pull_request: https://github.com/python/cpython/pull/21351 ___ Python tracker ___ __

[issue29778] _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath

2020-07-06 Thread miss-islington
Change by miss-islington : -- pull_requests: +20498 pull_request: https://github.com/python/cpython/pull/21352 ___ Python tracker ___ __

[issue29778] _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath

2020-07-06 Thread Steve Dower
Steve Dower added the comment: New changeset dcbaa1b49cd9062fb9ba2b9d49555ac6cd8c60b5 by Steve Dower in branch 'master': bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21297) https://github.com/python/cpython/commit/dcbaa1b49cd9062fb9ba2b9d49555ac6

[issue41208] An exploitable segmentation fault in marshal module

2020-07-06 Thread Iman Sharafodin
Iman Sharafodin added the comment: Sure. Thank you. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https

[issue41219] Mimetypes doesn't support audio/webm

2020-07-06 Thread cere blanco
New submission from cere blanco : Mimetypes doesn't support audio/webm -- components: Library (Lib) messages: 373140 nosy: cere blanco priority: normal severity: normal status: open title: Mimetypes doesn't support audio/webm type: enhancement versions: Python 3.8 _

[issue41220] add optional make_key argument to lru_cache

2020-07-06 Thread Itay azolay
New submission from Itay azolay : I'd like to add optional argument to lru_cache. This argument is a user given function that will replace the default behaviour of creating a key from the args/kwds of the function. for example: def my_make_key(my_list): return my_list[0] @lru_cache(128, ma

[issue41220] add optional make_key argument to lru_cache

2020-07-06 Thread Itay azolay
Change by Itay azolay : -- keywords: +patch pull_requests: +20499 stage: -> patch review pull_request: https://github.com/python/cpython/pull/21353 ___ Python tracker ___

[issue29778] _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath

2020-07-06 Thread miss-islington
miss-islington added the comment: New changeset 4981fe36c7477303de830e8dca929a02caaaffe4 by Miss Islington (bot) in branch '3.9': bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21297) https://github.com/python/cpython/commit/4981fe36c7477303de830e8

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: > I don't believe that this is an XLC bug, but I suspect that it is undefined > behavior / implementation-defined behavior. I was looking at the C99 standard but could not find anything that makes this undefined. Do you know what this construct is con

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Michael Felt
Michael Felt added the comment: Note: - two different systems, different HW, different OS levels. xlc-v11, master : commit deb016224cc506503fb05e821a60158c83918ed4 (HEAD -> master, upstream/master, upstream/HEAD) Segmentation fault in _PyEval_EvalFrameDefault at line 941 in file "../git/py39-

[issue22239] asyncio: nested event loop

2020-07-06 Thread mike bayer
mike bayer added the comment: hey there, I seem to have two cents to offer so here it is.An obscure issue in the Python bug tracker is probably not the right place for this so consider this as an early draft of something that maybe I'll talk about more elsewhere. > This basically divide

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread David Edelsohn
David Edelsohn added the comment: Maybe XLC was being overly aggressive with speculation and it now is fixed. I can't tell if Michael's earlier comment meant that it no longer crashes with XLC v16. -- ___ Python tracker

[issue29778] _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath

2020-07-06 Thread Łukasz Langa
Łukasz Langa added the comment: New changeset aa7f7756149a10c64d01f583b71e91814db886ab by Miss Islington (bot) in branch '3.8': bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21297) (GH-21352) https://github.com/python/cpython/commit/aa7f7756149a10c

[issue41215] AIX: build fails for xlc/xlC since new PEG parser

2020-07-06 Thread Pablo Galindo Salgado
Pablo Galindo Salgado added the comment: Well, in any case, I will submit a patch today to the parser generator to substitute the NULL for single-element arrays which seems to work. Michael, could you confirm that this patch works for you: diff --git a/Parser/pegen/parse.c b/Parser/pegen/par

  1   2   >