[issue17367] subprocess deadlock when read() is interrupted

2013-03-06 Thread John Szakmeister
John Szakmeister added the comment: Good grief... how did I miss that. The problem has been flaky for me to induce. I'll take a closer look at the correct section. Thank you Richard. -- ___ Python tracker <http://bugs.python.org/is

[issue16611] multiple problems with Cookie.py

2013-03-13 Thread John Dennis
John Dennis added the comment: That's because #3073 never addressed the core problems, so yes I would expect you would see failures. The point of the attached test is to illustrate the deficiencies in Cookie.py, so apparently it's doing it's job :-) FWIW, we wrote a new cookie

[issue17444] multiprocessing.cpu_count() should use hw.availcpu on Mac OS X

2013-03-17 Thread John Szakmeister
New submission from John Szakmeister: While trying to test a fix for Nose, I discovered that multiprocessing is picking up the CPU count incorrectly. It should be using hw.availcpu instead of hw.ncpu. The latter is the number of cpus installed in the system, but the former is the number

[issue17444] multiprocessing.cpu_count() should use hw.availcpu on Mac OS X

2013-03-18 Thread John Szakmeister
John Szakmeister added the comment: Ronald: it is mentioned in some books (a Google search can turn them up), but they don't really offer much description behind the intent. When I looked into this several years ago, it was very unclear what `hw.activecpu` was intended for. It sounded

[issue17444] multiprocessing.cpu_count() should use hw.availcpu on Mac OS X

2013-03-19 Thread John Szakmeister
John Szakmeister added the comment: Actually, Trent's version looks at hw.logicalcpu and then falls back to hw.ncpu, if there was an error. Given the state of the documentation on these parameters, it's hard to say whether it's right or wrong, but at least hw.logicalcpu scales

[issue17717] Set up nasm from external.bat

2013-04-13 Thread John Ehresman
New submission from John Ehresman: It would be nice for Tools\buildbot\external.bat to set a copy of nasm up to use. Is there a reason this is not done? -- components: Windows messages: 186752 nosy: jpe priority: normal severity: normal status: open title: Set up nasm from

[issue17723] Use FileRead and FileWrite in fileio.c on Windows

2013-04-13 Thread John Ehresman
New submission from John Ehresman: File object's can use the win32 api FileRead and FileWrite instead of the CRT's read & write function. This would eliminate the need to set the mode to binary on stdin & stdout, which is the underlying cause of issue 16587. This could al

[issue16587] Py_Initialize breaks wprintf on Windows

2013-04-13 Thread John Ehresman
John Ehresman added the comment: One way to fix this is to use the FileRead & FileWrite api functions directly as proposed in issue 17723 I would regard this as a change in behavior and not a simple bug fix because there is probably code written for 3.3 that assumes the C level stdout i

[issue17717] Set up nasm from external.bat

2013-04-21 Thread John Ehresman
John Ehresman added the comment: What I'd like is for external to set up all the dependencies needed to build python and run the test suite. Yes, nasm can be downloaded and set up separately, but that's true of all of the libraries that external.bat

[issue18050] _sre.MAXREPEAT not defined in 2.7.3

2013-05-24 Thread Samuel John
New submission from Samuel John: As also discussed at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704084 and https://github.com/mxcl/homebrew/pull/19300, Python 2.7.4 and 2.7.5 seem to have added an `from _sre import MAXREPEAT` to the sre_compile.py, sre_parse.py and sre_constants.py

[issue22873] Re: SSLsocket.getpeercert - return ALL the fields of the certificate.

2014-11-14 Thread John Nagle
New submission from John Nagle: In each revision of "getpeercert", a few more fields are returned. Python 3.2 added "issuer" and "notBefore". Python 3.4 added "crlDistributionPoints", "caIssuers", and OCSP URLS. But some fields still aren

[issue22873] Re: SSLsocket.getpeercert - return ALL the fields of the certificate.

2014-11-14 Thread John Nagle
John Nagle added the comment: May be a duplicate of Issue 204679: "ssl.getpeercert() should include extensions" http://bugs.python.org/issue20469 -- ___ Python tracker <http://bugs.python.o

[issue22946] urllib gives incorrect url after open when using HTTPS

2014-11-26 Thread John McKay
New submission from John McKay: After getting a sucessfull response, _open_generic_http will overwrite the the start of the url to be http: regardless of if it was called from open_http() or open_https(). This causes it to appear as if you were redirected to a non-secure site if you check the

[issue22946] urllib gives incorrect url after open when using HTTPS

2014-12-05 Thread John McKay
John McKay added the comment: For the test can I assume that we have the openssl binary in the path? The other tests just use a static response to emulate the server, but without being able to use s_client it would be quite a bit more effort to fake a working HTTP server with TLS so that it

[issue21279] str.translate documentation incomplete

2014-12-15 Thread John Posner
John Posner added the comment: Kindly ignore message #2 on the Rietveld page (sorry for the channel noise). Here's my suggested revision: Return a copy of the string *str* in which each character has been mapped through the given translation *table*. The table must be a subscriptable o

[issue21279] str.translate documentation incomplete

2014-12-19 Thread John Posner
John Posner added the comment: Regarding Martin's patch of 12-18: stdtypes.rst -- looks good to me unicodeobject.c -- I suggest changing this sentence: If a character is not in the table, the subscript operation should raise LookupError, and the character is left untouched. ... to: I

[issue21279] str.translate documentation incomplete

2014-12-21 Thread John Posner
John Posner added the comment: Patch of 12-21 looks good, Martin. -- ___ Python tracker <http://bugs.python.org/issue21279> ___ ___ Python-bugs-list mailin

[issue21279] str.translate documentation incomplete

2014-12-23 Thread John Posner
John Posner added the comment: issue21279.v5.patch tries to apply the comments in msg233013, msg233014, and msg233025 to the Doc/library/stdtypes.rst writeup. Then it applies some of the same language to the docstring in Objects/unicodeobject.c. -- Added file: http://bugs.python.org

[issue23113] Compiler doesn't recognize qualified exec('', {})

2014-12-25 Thread John Firestone
New submission from John Firestone: Python 2.7.8 (v2.7.8:ee879c0ffa11, Jun 29 2014, 21:07:35) [GCC 4.2.1 (Apple Inc. build 5666) (dot 3)] on darwin Type "help", "copyright", "credits" or "license" for more information. >>> def outer(): ...

[issue23113] Compiler doesn't recognize qualified exec('', {})

2014-12-25 Thread John Firestone
John Firestone added the comment: Sorry. Duplicates 21591 -- status: open -> closed ___ Python tracker <http://bugs.python.org/issue23113> ___ ___ Python-

[issue23153] Clarify Boolean Clause Results

2015-01-02 Thread John Potelle
New submission from John Potelle: >From v3.4 Tutorial section 5.7 It is possible to assign the result of a comparison or other Boolean expression to a variable. For example, >>> string1, string2, string3 = '', 'Trondheim', 'Hammer Dance' >>>

[issue23153] Clarify Boolean Clause Results

2015-01-03 Thread John Potelle
John Potelle added the comment: I'm learning Python and informing you this is confusing - and you close the ticket without hearing any response to your questions? Re: Josh 1. To show how to return a Boolean result from a Boolean clause. If there's a better way, I'm all for it.

[issue23153] Clarify Boolean Clause Results

2015-01-03 Thread John Potelle
John Potelle added the comment: Thank you for your reasoned responses. I'm beginning to see just how much Python is its own animal. This and/or thing has history; I get it. Links back to the reference documentation is a good idea. -- ___ P

[issue23287] ctypes.util.find_library needlessly call crle on Solaris

2015-01-20 Thread John Beck
New submission from John Beck: On Solaris, in Lib/ctypes/util.py, we have code that looks for /usr/bin/crle and calls it to parse its output to try to determine the Default Library Path. This code broke recently (Solaris 12 build 65), as it expects to find a line starting with "De

[issue21279] str.translate documentation incomplete

2015-01-25 Thread John Posner
John Posner added the comment: Per Martin's suggestion, deltas from issue21279.v5.patch: * no change to patch for doc/library/stdtypes.rst * doc string reflowed in patch for objects/unicodeobject.c -- Added file: http://bugs.python.org/file37855/issue21279.v6.

[issue23396] Wrong print for 2.7.9

2015-02-04 Thread John Boersma
New submission from John Boersma: In the tutorial for 2.7.9, in the section on quotes and the escape character, there is the following example text: >>> '"Isn\'t," she said.' '"Isn\'t," she said.' >>> print '"Is

[issue23396] Wrong print for 2.7.9

2015-02-04 Thread John Boersma
John Boersma added the comment: To clarify - this is in tutorial section 3.1.2. -- ___ Python tracker <http://bugs.python.org/issue23396> ___ ___ Python-bug

[issue10320] printf %qd is nonstandard

2015-02-08 Thread John Malmberg
John Malmberg added the comment: OpenVMS needs %lld or "%" PY_FORMAT_LONG_LONG "d" in order to build the _ctypes module. -- nosy: +John.Malmberg ___ Python tracker <http://bug

[issue20916] ssl.enum_certificates() will not return all certificates trusted by Windows

2015-02-11 Thread John Nagle
John Nagle added the comment: Amusingly, I'm getting this failure on "verisign.com" on Windows 7 with Python 2.7.9: "HTTP error - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)..)" The current Verisign root cert (Class 3 public) is, indeed,

[issue22211] Remove VMS specific code in expat.h & xmlrole.h

2015-02-15 Thread John Malmberg
John Malmberg added the comment: These files are identical to the files in the expat git repository. So it looks like I need to submit the fix and get it accepted to that repository first. And then at some point cPython will pick up the change. I can still provide diffs if desired, but based

[issue23476] SSL cert verify fail for "www.verisign.com"

2015-02-17 Thread John Nagle
New submission from John Nagle: SSL certificate verification fails for "www.verisign.com" when using the cert list from Firefox. Other sites ("google.com", "python.org") verify fine. This may be related to a known, and fixed, OpenSSL bug. See: http://rt.open

[issue23476] SSL cert verify fail for "www.verisign.com"

2015-02-17 Thread John Nagle
John Nagle added the comment: Add cert file for testing. Source of this file is http://curl.haxx.se/ca/cacert.pem -- Added file: http://bugs.python.org/file38166/cacert.pem ___ Python tracker <http://bugs.python.org/issue23

[issue23476] SSL cert verify fail for "www.verisign.com"

2015-02-17 Thread John Nagle
John Nagle added the comment: To try this with the OpenSSL command line client, use this shell command: openssl s_client -connect www.verisign.com:443 -CAfile cacert.pem This provides more detailed error messages than Python provides. "verify error:num=20:unable to get local i

[issue23476] SSL cert verify fail for "www.verisign.com"

2015-02-20 Thread John Nagle
John Nagle added the comment: The "fix" in Ubuntu was to the Ubuntu certificate store, which is a directory tree with one cert per file, with lots of symbolic links with names based on hashes to express dependencies. Python's SSL isn't using that. Python is taking in one

[issue24299] 2.7.10 test__locale.py change breaks on Solaris

2015-05-27 Thread John Beck
New submission from John Beck: The upgrade from 2.7.9 to 2.7.10 resulted in test__locale failing. This test had previously succeeded. The difference is that the thousands-separator for the fr_FR locale in known_numerics was changed from '' (i.e., unknown) to ' ' (i.e. spa

[issue24339] iso6937 encoding missing

2015-05-31 Thread John Helour
New submission from John Helour: Please add encoding for the iso6937 charset. Many settopboxes (DVB-T/S) and relevant devices uses it for displaying EPG, videotext, etc. I've wrote (please look at the attached file) the encoding/decoding conversion codec some years ago. -- compo

[issue24339] iso6937 encoding missing

2015-06-01 Thread John Helour
John Helour added the comment: I've rewrote the iso6937 codec into Python 3. Could someone check it please? -- Added file: http://bugs.python.org/file39583/iso6937.py ___ Python tracker <http://bugs.python.org/is

[issue24339] iso6937 encoding missing

2015-06-05 Thread John Helour
Changes by John Helour : Added file: http://bugs.python.org/file39631/iso6937.py ___ Python tracker <http://bugs.python.org/issue24339> ___ ___ Python-bugs-list mailin

[issue24339] iso6937 encoding missing

2015-06-05 Thread John Helour
Changes by John Helour : Added file: http://bugs.python.org/file39632/iso6937.py ___ Python tracker <http://bugs.python.org/issue24339> ___ ___ Python-bugs-list mailin

[issue24339] iso6937 encoding missing

2015-06-05 Thread John Helour
Changes by John Helour : Removed file: http://bugs.python.org/file39631/iso6937.py ___ Python tracker <http://bugs.python.org/issue24339> ___ ___ Python-bugs-list mailin

[issue24339] iso6937 encoding missing

2015-06-05 Thread John Helour
Changes by John Helour : Removed file: http://bugs.python.org/file39583/iso6937.py ___ Python tracker <http://bugs.python.org/issue24339> ___ ___ Python-bugs-list mailin

[issue24339] iso6937 encoding missing

2015-06-05 Thread John Helour
Changes by John Helour : Removed file: http://bugs.python.org/file39632/iso6937.py ___ Python tracker <http://bugs.python.org/issue24339> ___ ___ Python-bugs-list mailin

[issue24339] iso6937 encoding missing

2015-06-05 Thread John Helour
Changes by John Helour : Added file: http://bugs.python.org/file39633/iso6937.py ___ Python tracker <http://bugs.python.org/issue24339> ___ ___ Python-bugs-list mailin

[issue24299] 2.7.10 test__locale.py change breaks on Solaris

2015-06-08 Thread John Beck
John Beck added the comment: (Apologies for not responding on May 27 when you posted the patch; I failed to notice the "Added file:" line in the e-mail notification.) Yes! The patch you posted fixes the issue. Thank you! -- ___ Pyth

[issue24339] iso6937 encoding missing

2015-06-18 Thread John Helour
Changes by John Helour : Removed file: http://bugs.python.org/file39575/iso6937.py ___ Python tracker <http://bugs.python.org/issue24339> ___ ___ Python-bugs-list mailin

[issue14046] argparse: assertion failure if optional argument has square/round brackets in metavar

2015-06-29 Thread John Jones
John Jones added the comment: Im kind of surprised this bug has lasted for so many years :) setting part_regexp to: r'\(.*?\(.*?\).*?\)+|\[.*?\[.*?\].*?\]+|\S+' fixes the issue for me, although its not very elegant -- nosy: +John Jones

[issue24613] array.fromstring Use After Free

2015-07-11 Thread John Leitch
John Leitch added the comment: Attaching patch. -- keywords: +patch Added file: http://bugs.python.org/file39900/arraymodule.c.patch ___ Python tracker <http://bugs.python.org/issue24

[issue24613] array.fromstring Use After Free

2015-07-11 Thread John Leitch
New submission from John Leitch: The Python array.fromstring() method suffers from a use after free caused by unsafe realloc use. The issue is triggered when an array is concatenated to itself via fromstring() call: static PyObject * array_fromstring(arrayobject *self, PyObject *args

[issue24617] os.makedirs()'s [mode] not correct

2015-07-12 Thread John Jones
New submission from John Jones: os.makedirs() gives the optional variable mode to set the permissions on the directories it creates. While it seems to work for all triplet octal values (777,755,etc) it doesn't seem to work on values with the sticky bit (1777,1755,etc) I know that to se

[issue21238] unittest.mock.Mock should not allow you to use non-existent assert methods

2015-07-16 Thread John Allison
John Allison added the comment: That probably IS a joke. Why not fix the underlying issue instead? -- nosy: +John Allison ___ Python tracker <http://bugs.python.org/issue21

[issue24661] CGIHTTPServer: premature unescaping of query string

2015-07-18 Thread John S
New submission from John S: I created a simple CGI script that outputs the query string passed to it: ``` #!/usr/bin/env python import os print 'Content-Type: text/html\n\n' print os.environ['QUERY_STRING'] ``` I saved it as cgi-bin/test.cgi and made it executable. I

[issue24661] CGIHTTPServer: premature unescaping of query string

2015-07-19 Thread John S
John S added the comment: Image you had the following URL. http://localhost:8000/cgi-bin/test.cgi?q=Dolce%26Gabbana&p=1 os.environ['QUERY_STRING'] would hold the value q=Dolce&Gabbana&p=1 If you ran the following code, you would be unable to get the value of th

[issue23287] ctypes.util.find_library needlessly call crle on Solaris

2015-07-21 Thread John Beck
John Beck added the comment: First, there are two related but somewhat separate issues here. Regarding the patches attached to http://bugs.python.org/issue20664 they seem fine. In theory, they should not be needed, as though it is true that dump(1) moved from /usr/ccs/bin to /usr/bin in

[issue24708] strop.replace Integer Overflow

2015-07-24 Thread John Leitch
John Leitch added the comment: Attaching repro. -- Added file: http://bugs.python.org/file40007/strop.replace_Integer_Overflow.py ___ Python tracker <http://bugs.python.org/issue24

[issue24708] strop.replace Integer Overflow

2015-07-24 Thread John Leitch
New submission from John Leitch: The Python strop.replace() method suffers from an integer overflow that can be exploited to write outside the bounds of the string buffer and potentially achieve code execution. The issue can be triggered by performing a large substitution that overflows the

[issue24613] array.fromstring Use After Free

2015-07-24 Thread John Leitch
John Leitch added the comment: I understand the desire for consistency and I will create such a patch when I get some slack space (hopefully tonight), but I believe it will constitute a breaking change; in 2.7, passing self to array.fromstring works as expected most of the time

[issue24613] array.fromstring Use After Free

2015-07-24 Thread John Leitch
John Leitch added the comment: To clarify one point, passing self to array.fromstring works as expected almost all the time in 2.7. My testing revealed anomalous behavior <1% of the time, and it was almost always non-fatal corruption of the buffer. It stands to reason that legacy code

[issue24712] Docs page's sidebar vibrates on mouse wheel scroll on Chrome.

2015-07-24 Thread Biwin John
Changes by Biwin John : -- assignee: docs@python components: Documentation nosy: Biwin John, docs@python priority: normal severity: normal status: open title: Docs page's sidebar vibrates on mouse wheel scroll on Chrome. type: behavior versions: Pytho

[issue24712] Docs page's sidebar vibrates on mouse wheel scroll on Chrome.

2015-07-24 Thread Biwin John
New submission from Biwin John: The sidebar on the documentation pages ex. https://docs.python.org/2/library/collections.html vibrates/flashes on mouse wheel scroll. The sidebar with class sphinxsidebar, works okay when scrolling with the scrollbar, Firefox but not with mouse wheel on Chrome

[issue24708] strop.replace Integer Overflow

2015-07-24 Thread John Leitch
Changes by John Leitch : Removed file: http://bugs.python.org/file40006/strop.replace_Integer_Overflow.patch ___ Python tracker <http://bugs.python.org/issue24

[issue24708] strop.replace Integer Overflow

2015-07-24 Thread John Leitch
John Leitch added the comment: Oops. Here's a corrected patch. -- Added file: http://bugs.python.org/file40009/strop.replace_Integer_Overflow.patch ___ Python tracker <http://bugs.python.org/is

[issue24712] Docs page's sidebar vibrates on mouse wheel scroll on Chrome.

2015-07-25 Thread Biwin John
Biwin John added the comment: The problem exist with the Chrome on Ubuntu, Windows and OSX, but ony with the python docs for version 2.7. Docs for 2.6 use the same sidebar. But in 2.7 docs, the content of sidebar is positioned with the style added on scroll, style="float: left; margin-

[issue24613] array.fromstring Use After Free

2015-07-25 Thread John Leitch
John Leitch added the comment: Attached is a patch that updates array.fromstring to throw a ValueError when self is passed. It also updates the unit tests to cover this new behavior. -- Added file: http://bugs.python.org/file40023/array.fromstring-Use-After-Free.patch

[issue24757] Installing Py on Windows: Need to restart or logout for path to be added

2015-07-30 Thread John Palermo
New submission from John Palermo: Something I suppose many new users could stumble over: After installing Python and trying out "pip" or "python" on the command line nothing is found. You have to re-start Windows or re-log into your account. I suggest adding thi

[issue24802] PyFloat_FromString Buffer Over-read

2015-08-05 Thread John Leitch
New submission from John Leitch: Python suffers from a buffer over-read in PyFloat_FromString() that is caused by the incorrect assumption that buffers returned by PyObject_GetBuffer() are null-terminated. This could potentially result in the disclosure of adjacent memory. PyObject

[issue24802] PyFloat_FromString Buffer Over-read

2015-08-05 Thread John Leitch
John Leitch added the comment: Attaching repro -- Added file: http://bugs.python.org/file40133/PyFloat_FromString_Buffer_Over-read.py ___ Python tracker <http://bugs.python.org/issue24

[issue24803] PyNumber_Long Buffer Over-read.patch

2015-08-05 Thread John Leitch
New submission from John Leitch: Python suffers from a buffer over-read in PyNumber_Long() that is caused by the incorrect assumption that buffers returned by PyObject_GetBuffer() are null-terminated. This could potentially result in the disclosure of adjacent memory. PyObject

[issue24803] PyNumber_Long Buffer Over-read.patch

2015-08-05 Thread John Leitch
John Leitch added the comment: Attaching repro. -- Added file: http://bugs.python.org/file40135/PyNumber_Long_Buffer_Over-read.py ___ Python tracker <http://bugs.python.org/issue24

[issue4214] no extension debug info with msvc9compiler.py

2015-08-07 Thread John Ehresman
John Ehresman added the comment: I just ran into this again when I installed 2.7.10 -- evidently I had patched my local installation and forgot about it. This is very important to anyone who tries to use the Visual Studio C debugger to debug extension modules. -- nosy: +jpe

[issue24852] Python 3.5.0rc1 "HOWTO Use Python in the web" needs fix

2015-08-12 Thread John Hagen
New submission from John Hagen: https://docs.python.org/3.5/howto/webservers.html#setting-up-fastcgi The "HOWTO Use Python in the web" documentation for 3.5.0rc1 prescribes to use flup in its example, which is not compatible with Python 3. This has led to some confusi

[issue24852] Python 3.5.0rc1 "HOWTO Use Python in the web" needs fix

2015-08-13 Thread John Hagen
John Hagen added the comment: A couple other notes I saw: The examples (https://docs.python.org/3.5/howto/webservers.html#setting-up-fastcgi) do not follow PEP 8 (should not have an encoding statement if it is UTF-8 Python 3) or the current guidance in PEP 394 to use "python3" in t

[issue23972] Asyncio reuseport

2015-08-18 Thread John Lehmann
Changes by John Lehmann : -- nosy: +j1o1h1n ___ Python tracker <http://bugs.python.org/issue23972> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue21253] unittest assertSequenceEqual can lead to Difflib.compare() crashing on mostly different sequences

2015-08-20 Thread John Taylor
John Taylor added the comment: I am seeing something similar in difflib.HtmlDiff.make_file() under Python 3.4.3 (windows 7). Do I need to file a separate bug report? File "H:\test\test.py", line 522, in print_differ diff = html.make_file(file1_data,file2_data,"dir 1",

[issue24904] Patch: add timeout to difflib SequenceMatcher ratio() and quick_ratio()

2015-08-20 Thread John Taylor
New submission from John Taylor: SequenceMatcher in the difflib module contain ratio() and quick_ratio() methods which can take a long time to run with certain input. One example is two slightly different versions of jquery.min.js. I have written a patch against python-350b4 that adds a

[issue24913] newblock() Uninitialized Variable

2015-08-21 Thread John Leitch
New submission from John Leitch: Python 3.5 suffers from a vulnerability caused by the behavior of the newblock() function used by the collections.deque module. When called, newblock() allocates memory using PyMem_Malloc() and does not initialize it: static block * newblock(Py_ssize_t len

[issue24913] newblock() Uninitialized Variable

2015-08-21 Thread John Leitch
Changes by John Leitch : Added file: http://bugs.python.org/file40225/newblock_Uninitialized_variable.py ___ Python tracker <http://bugs.python.org/issue24913> ___ ___

[issue24917] time_strftime() Buffer Over-read

2015-08-22 Thread John Leitch
New submission from John Leitch: Python 3.5 suffers from a vulnerability caused by the behavior of the time_strftime() function. When called, the function loops over the format string provided, using strchr to search for each instance of '%'. After finding a '%', it con

[issue24917] time_strftime() Buffer Over-read

2015-08-22 Thread John Leitch
Changes by John Leitch : Added file: http://bugs.python.org/file40229/time_strftime_Buffer_Over-read.py ___ Python tracker <http://bugs.python.org/issue24917> ___ ___

[issue24913] newblock() Uninitialized Variable

2015-08-25 Thread John Leitch
John Leitch added the comment: The "exception analysis" is output from the WinDbg !analyze command run on a crash where access to the uninitialized memory ultimately corrupted the instruction pointer, leading to a data execution prevention crash. That's why the disassembly is

[issue24985] Python install test fails - OpenSSL - "dh key too small"

2015-09-02 Thread John Nagle
New submission from John Nagle: Installing Python 3.4.3 on a new CentOS Linux release 7.1.1503 server. Started with source tarball, did usual ./configure; make; make test SSL test fails with "dh key too small". See below. OpenSSL has recently been modified to reject short keys

[issue24989] scan_eol() Buffer Over-read

2015-09-02 Thread John Leitch
New submission from John Leitch: Python 3.5 suffers from a vulnerability caused by the behavior of the scan_eol() function. When called, the function gets a line from the buffer of a BytesIO object by searching for a newline character starting at the position in the buffer. However, if the

[issue24989] scan_eol() Buffer Over-read

2015-09-02 Thread John Leitch
Changes by John Leitch : Added file: http://bugs.python.org/file40327/scan_eol_Buffer_Over-read.py ___ Python tracker <http://bugs.python.org/issue24989> ___ ___ Pytho

[issue24989] scan_eol() Buffer Over-read

2015-09-02 Thread John Leitch
John Leitch added the comment: We based our fix on the check in write_bytes: if (endpos > (size_t)PyBytes_GET_SIZE(self->buf)) { if (resize_buffer(self, endpos) < 0) return -1; } I see now that our casting was extraneous. As for the macro, it was suspec

[issue24917] time_strftime() Buffer Over-read

2015-09-04 Thread John Leitch
Changes by John Leitch : -- nosy: +belopolsky, lemburg ___ Python tracker <http://bugs.python.org/issue24917> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue24917] time_strftime() Buffer Over-read

2015-09-04 Thread John Leitch
John Leitch added the comment: Currently, no. Would you like us to report this and future vulnerabilities to CERT? -- ___ Python tracker <http://bugs.python.org/issue24

[issue25003] os.urandom() should call getrandom(2) not getentropy(2)

2015-09-04 Thread John Beck
New submission from John Beck: A recent Solaris build upgrade resulted in a massive slowdown of a package operation (our package client is written in Python). Some DTrace revealed this was because os.urandom() calls had slowed down by a factor of over 300. This turned out to be caused by an

[issue25004] test_mmap should catch f.close() failure in LargeMmapTests._make_test_file()

2015-09-04 Thread John Beck
New submission from John Beck: When running test_mmap on a partition with < 4GB free, it back-traced: Traceback (most recent call last): File "/usr/lib/python3.4/test/test_mmap.py", line 728, in _make_test_file f.flush() OSError: [Errno 28] No space left on device During ha

[issue24917] time_strftime() Buffer Over-read

2015-09-04 Thread John Leitch
John Leitch added the comment: > I have tried the reproducer on Windows 10 with 2.6, 2.7, 3.3, 3.4, 3.5 and > 3.6. In every case I got this. What you are observing is due to the arrangement and contents of process memory. With a simple repro (such as the one provided), there's a

[issue24917] time_strftime() Buffer Over-read

2015-09-04 Thread John Leitch
John Leitch added the comment: It very well may apply to versions apart from 3.5. Our test environment is quite complex and unfriendly to working with multiple versions of Python. Plus, we're strapped for time, so we tend to file under the version we're currently targeting and defe

[issue24917] time_strftime() Buffer Over-read

2015-09-04 Thread John Leitch
John Leitch added the comment: When I get a bit of slackspace (probably tomorrow afternoon/evening) I can test on the spectrum of versions to confirm the issue is in >= 3.2. I'll also look into improving our automation so all future reports can have the appropriate versions

[issue24917] time_strftime() Buffer Over-read

2015-09-04 Thread John Leitch
John Leitch added the comment: Attached is a revised patch. -- Added file: http://bugs.python.org/file40367/time_strftime_Buffer_Over-read_v2.patch ___ Python tracker <http://bugs.python.org/issue24

[issue24917] time_strftime() Buffer Over-read

2015-09-04 Thread John Leitch
John Leitch added the comment: I plucked the error message from the % operator: >>> '%' % 'foo' Traceback (most recent call last): File "", line 1, in ValueError: incomplete format >>> '%z' % 'foo' Traceback (most rece

[issue24917] time_strftime() Buffer Over-read

2015-09-05 Thread John Leitch
John Leitch added the comment: Is there a way to see what style guidelines have been violated? The only thing I can think of is the curly braces in the Windows check, but I was following the conventions of the surrounding code. -- ___ Python

[issue24917] time_strftime() Buffer Over-read

2015-09-05 Thread John Leitch
John Leitch added the comment: Yikes--your comment prompted me to look at the check-in, and it seems my patch wasn't properly applied. The curly braces got tweaked, which is minor as you stated, but more importantly the AIX code should not decref format. That could introduce problems b

[issue24917] time_strftime() Buffer Over-read

2015-09-05 Thread John Leitch
John Leitch added the comment: If it's so wildly inconsistent, it's my opinion that Python should perform its own validation to achieve better cross-platform support. The alternative is playing a never ending game of whack-a-mole, or just accepting that format strings may cause exc

[issue24917] time_strftime() Buffer Over-read

2015-09-05 Thread John Leitch
John Leitch added the comment: Yes, this is a user-mode read, but I disagree with the assertion that it's not possible to use this to disclose memory. While it isn't as critical as something that outright dumps memory, there is logic that throws exceptions based on values encount

[issue24917] time_strftime() Buffer Over-read

2015-09-06 Thread John Leitch
John Leitch added the comment: First, let me begin by saying I believe this patch will fix the buffer over-read, which is a good step forward. However, after giving the matter more thought, and at the risk of wearing out my welcome, I am of the belief that relying on the CRT to handle

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread John Leitch
New submission from John Leitch: Python 3.4 and 3.5 suffer from a vulnerability caused by the behavior of the xmlparse_setattro() function. When called, the function uses the provided name argument in several conditional statements which assume that the name argument is a string. However, if

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread John Leitch
Changes by John Leitch : -- keywords: +patch Added file: http://bugs.python.org/file40395/xmlparse_setattro_Type_Confusion.patch ___ Python tracker <http://bugs.python.org/issue25

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread John Leitch
Changes by John Leitch : -- nosy: +brycedarling ___ Python tracker <http://bugs.python.org/issue25019> ___ ___ Python-bugs-list mailing list Unsubscribe:

<    4   5   6   7   8   9   10   11   12   13   >