[issue12383] subprocess.Popen(..., env={}) fails to pass empty env.

2017-05-30 Thread Gregory P. Smith
Gregory P. Smith added the comment: fixed in https://github.com/python/cpython/commit/85aba238e49abd2d5a604102981d28a50f305443 -- ___ Python tracker <http://bugs.python.org/issue12

[issue12383] subprocess.Popen(..., env={}) fails to pass empty env.

2017-05-30 Thread Gregory P. Smith
Changes by Gregory P. Smith : -- resolution: -> fixed stage: needs patch -> resolved status: open -> closed ___ Python tracker <http://bugs.python.or

[issue27448] Race condition in subprocess.Popen which causes a huge memory leak

2017-06-03 Thread Gregory P. Smith
Changes by Gregory P. Smith : -- pull_requests: +2009 ___ Python tracker <http://bugs.python.org/issue27448> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue1054041] Python doesn't exit with proper resultcode on SIGINT

2019-02-23 Thread Gregory P. Smith
Change by Gregory P. Smith : -- pull_requests: +12029 ___ Python tracker <https://bugs.python.org/issue1054041> ___ ___ Python-bugs-list mailing list Unsub

[issue1054041] Python doesn't exit with proper resultcode on SIGINT

2019-02-23 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset 06babb24225d41a76e4aee975380294ca1ee1d7c by Gregory P. Smith in branch 'master': bpo-1054041: Add What's New docs. (GH-11999) https://github.com/python/cpython/commit/06babb24225d41a76e4aee975

[issue32387] Disallow untagged C extension import on major platforms

2019-03-01 Thread Gregory P. Smith
Gregory P. Smith added the comment: I think it'd be worth doing on POSIX systems for some 3.8 alpha/beta release cycles before making a final call there. -- ___ Python tracker <https://bugs.python.org/is

[issue36046] support dropping privileges when running subprocesses

2019-03-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: I like the separate parameters. :) -- ___ Python tracker <https://bugs.python.org/issue36046> ___ ___ Python-bugs-list mailin

[issue33319] `subprocess.run` documentation doesn't tell is using `stdout=PIPE` safe

2019-03-23 Thread Gregory P. Smith
Change by Gregory P. Smith : -- keywords: +patch pull_requests: +12459 stage: needs patch -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36354] Use CreateProcessW for Python 2.7 on Windows.

2019-03-23 Thread Gregory P. Smith
Gregory P. Smith added the comment: 2.7 was closed to new features eons ago. While subprocess32 backport might be a plausible home for this, I really can't handle doing anything significant for Windows within the confines of that project (it already makes me nervous that anyone is

[issue33319] `subprocess.run` documentation doesn't tell is using `stdout=PIPE` safe

2019-03-23 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset 7a2e84c3488cfd6c108c6b41ff040825f1757566 by Gregory P. Smith in branch 'master': bpo-33319: Clarify subprocess call docs. (GH-12508) https://github.com/python/cpython/commit/7a2e84c3488cfd6c108c6b41ff0408

[issue33319] `subprocess.run` documentation doesn't tell is using `stdout=PIPE` safe

2019-03-23 Thread Gregory P. Smith
Change by Gregory P. Smith : -- nosy: -miss-islington resolution: -> fixed stage: patch review -> commit review status: open -> closed ___ Python tracker <https://bugs.python.or

[issue6721] Locks in the standard library should be sanitized on fork

2019-04-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: We need a small test case that can reproduce your problem. I believe https://github.com/python/cpython/commit/3b699932e5ac3e76031bbb6d700fbea07492641d to be correct. acquiring locks before fork in the thread doing the forking and releasing them

[issue6721] Locks in the standard library should be sanitized on fork

2019-04-03 Thread Gregory P. Smith
Gregory P. Smith added the comment: I'd start with faulthandler.register with all_threads=True and see if that gives you what you need. https://docs.python.org/3/library/faulthandler.html -- ___ Python tracker <https://bugs.python.org/i

[issue36530] Document codecs decode_encode() and encode_decode() APIs

2019-04-04 Thread Gregory P. Smith
New submission from Gregory P. Smith : The codecs module has public decode_encode() and encode_decode() functions. They have never been documented, but are recommended for some uses such as: https://stackoverflow.com/questions/14820429/how-do-i-decodestring-escape-in-python3/23151714

[issue36530] Document codecs decode_encode() and encode_decode() APIs

2019-04-04 Thread Gregory P. Smith
Change by Gregory P. Smith : -- superseder: -> Missing documentation for codecs.escape_decode ___ Python tracker <https://bugs.python.org/issue36530> ___ _

[issue36530] Document codecs decode_encode() and encode_decode() APIs

2019-04-04 Thread Gregory P. Smith
Change by Gregory P. Smith : -- resolution: -> duplicate stage: needs patch -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue30588] Missing documentation for codecs.escape_decode

2019-04-04 Thread Gregory P. Smith
Gregory P. Smith added the comment: We can't change it or remove it, it is public by virtue of its name. We should document it. Removing or renaming it to be _private requires a PendingDeprecationWarning -> DeprecationWarning -> removal cycle. it is well known and u

[issue30588] Missing documentation for codecs.escape_decode

2019-04-04 Thread Gregory P. Smith
Change by Gregory P. Smith : -- stage: -> needs patch ___ Python tracker <https://bugs.python.org/issue30588> ___ ___ Python-bugs-list mailing list Unsubscrib

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-05 Thread Gregory P. Smith
New submission from Gregory P. Smith : I'm spawning a dicussion buried in the way too long thread of https://bugs.python.org/issue6721 over here into its own specific issue to treat as a 3.7 release blocker for a rollback or repair decision before 3.7.4. https://github.com/python/cp

[issue6721] Locks in the standard library should be sanitized on fork

2019-04-05 Thread Gregory P. Smith
Gregory P. Smith added the comment: Thanks for the debugging details! I've filed https://bugs.python.org/issue36533 to specifically track this potential regression in the 3.7 stable branch. lets carry on there where the discussion thread isn't too long for bug trac

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-05 Thread Gregory P. Smith
Gregory P. Smith added the comment: That custom DebugHandler's emit() implementation that calls into one or more sub-handlers suggests that libreswan _might_ be able to fix it in the custom DebugHandler by implementing custom acquire() and release() methods... BUT that is a fundamen

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-05 Thread Gregory P. Smith
Gregory P. Smith added the comment: Within the logging module we could go beyond using a WeakSet and maintain an ordering. But we'd need to allow a way for Handler subclasses to indicate what order matters; that'd require a new API (not suitable for 3.7) An ordering its

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-05 Thread Gregory P. Smith
Gregory P. Smith added the comment: A stdlib alternative to this whole mess would be to avoid acquiring the logging locks before fork() as we currently do and just blindly re-initialize all of them afterwards under the assumption that they "can't" be protecting anything in

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-05 Thread Gregory P. Smith
Gregory P. Smith added the comment: Now to back up: Why was this application using fork() in a threaded application at all? That is a fundamental flaw. Should we be doing work to support things that so far merely _happen_ to work on such broken designs? Another alternative for the

[issue36538] _thread.interrupt_main() no longer interrupts Lock.wait

2019-04-05 Thread Gregory P. Smith
New submission from Gregory P. Smith : In Python 2.7 our threading implementation was so poor that a thread join ultimately called our lock wait implementation that busy looped polling and sleeping to check for a lock acquisition success. calling thread.interrupt_main() which is just

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-06 Thread Gregory P. Smith
Change by Gregory P. Smith : -- keywords: +patch pull_requests: +12628 stage: -> patch review ___ Python tracker <https://bugs.python.org/issue36533> ___ _

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-06 Thread Gregory P. Smith
Gregory P. Smith added the comment: Here's a PR that goes the re-initialization route rather than attempting to acquire/release anything other than the single module _lock. -- nosy: +lukasz.langa versions: +Python 3.8 ___ Python tracker &

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-08 Thread Gregory P. Smith
Gregory P. Smith added the comment: The logging library has never guaranteed that it wouldn't interleave or duplicate buffered io output when fork() in involved. We should not start trying to claim that it does. Too complicated and fragile. It can't. Users who want that should

[issue36276] [CVE-2019-9740] Python urllib CRLF injection vulnerability

2019-04-09 Thread Gregory P. Smith
Change by Gregory P. Smith : -- pull_requests: +12683 ___ Python tracker <https://bugs.python.org/issue36276> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue14826] urlopen URL with unescaped space

2019-04-09 Thread Gregory P. Smith
Change by Gregory P. Smith : -- pull_requests: +12682 stage: -> patch review ___ Python tracker <https://bugs.python.org/issue14826> ___ ___ Python-bugs-lis

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-09 Thread Gregory P. Smith
Gregory P. Smith added the comment: > """ Since the documentation seems to be silent the guarantee (or expectation) is implied - logging systems emit records atomically - if this isn't true across fork() then the exception should be documented. """

[issue14826] urlopen URL with unescaped space

2019-04-10 Thread Gregory P. Smith
Change by Gregory P. Smith : -- pull_requests: +12687 ___ Python tracker <https://bugs.python.org/issue14826> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue14826] urlopen URL with unescaped space

2019-04-10 Thread Gregory P. Smith
Gregory P. Smith added the comment: urllib.request.URLopener() and FancyURLopener() automatically quote() URLs for the user. Those APIs are marked deprecated since 3.3 but have no timeline for removal. urllib.request.urlopen() does not use those, so URLs passed in are not auto-quoted

[issue30458] [CVE-2019-9740][security] CRLF Injection in httplib

2019-04-10 Thread Gregory P. Smith
Change by Gregory P. Smith : -- keywords: +patch pull_requests: +12688 stage: -> patch review ___ Python tracker <https://bugs.python.org/issue30458> ___ _

[issue14826] urlopen URL with unescaped space

2019-04-10 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset 2fb2bc81c3f40d73945c6102569495140e1182c7 by Gregory P. Smith in branch 'master': bpo-14826: document that URLopener quotes fullurl. (GH-12758) https://github.com/python/cpython/commit/2fb2bc81c3f40d73945c6102569495

[issue30458] [CVE-2019-9740][security] CRLF Injection in httplib

2019-04-10 Thread Gregory P. Smith
Gregory P. Smith added the comment: Martin claimed "Actually, the CRLF + space can be injected via percent encoding" I am unable to reproduce that behavior using urllib.request.urlopen() or urllib.request.URLopener.open() in my master/3.8 tree. -- nosy: +grego

[issue30458] [CVE-2019-9740][security] CRLF Injection in httplib

2019-04-10 Thread Gregory P. Smith
Change by Gregory P. Smith : -- assignee: -> gregory.p.smith ___ Python tracker <https://bugs.python.org/issue30458> ___ ___ Python-bugs-list mailing list Un

[issue35906] [CVE-2019-9947] Header Injection in urllib

2019-04-10 Thread Gregory P. Smith
Gregory P. Smith added the comment: my fix proposed in issue30458 fixes this issue. i do not think this one deserved its own CVE; at least https://nvd.nist.gov/vuln/detail/CVE-2019-9947's current text also points to the other one. -- nosy: +gregory.p.smith resolution: -> d

[issue35906] [CVE-2019-9947] Header Injection in urllib

2019-04-10 Thread Gregory P. Smith
Change by Gregory P. Smith : -- stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.org/issue35906> ___ ___ Pyth

[issue36587] race in logging code when fork()

2019-04-10 Thread Gregory P. Smith
Change by Gregory P. Smith : -- assignee: -> gregory.p.smith ___ Python tracker <https://bugs.python.org/issue36587> ___ ___ Python-bugs-list mailing list Un

[issue36587] race in logging code when fork()

2019-04-10 Thread Gregory P. Smith
Gregory P. Smith added the comment: yeah i saw that bug buried in there, this weakset goes away with my proposed PR. -- ___ Python tracker <https://bugs.python.org/issue36

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-04-10 Thread Gregory P. Smith
Gregory P. Smith added the comment: The problem i am fixing is merely making Python's logging library not the source of this deadlock because it was not the source in the past. I am solving a regression in CPython behavior between 3.7.0 and 3.7.1 that led to a logging.Handler lock re

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-04-10 Thread Gregory P. Smith
Gregory P. Smith added the comment: > *Maybe* we need to provide a way to allow to pass junk characters in an URL? > (disable URL validation) We should not do this in our http protocol stack code. Anyone who _wants_ that is already intentionally violating the http protocol which d

[issue35925] test_httplib test_nntplib test_ssl fail on ARMv7 Debian buster bot (OpenSSL 1.1.1a)

2019-04-12 Thread Gregory P. Smith
Gregory P. Smith added the comment: While altering the environment to not use the system default openssl config is an option to make this green again today very easily. That'd "solve" the red bot problem and nothing else. :/ Doing that just kicks the can down the road as

[issue36601] signals can be caught by any thread

2019-04-12 Thread Gregory P. Smith
Gregory P. Smith added the comment: We can remove ancient Irix and LinuxThreads hacks from our codebase. The best way to shake issues of this sort out is to remove it and watch for issues on supported buildbots and during beta releases. I don't expect any fallout from this one.

[issue27987] obmalloc's 8-byte alignment causes undefined behavior

2019-04-12 Thread Gregory P. Smith
Change by Gregory P. Smith : -- versions: +Python 3.8, Python 3.9 ___ Python tracker <https://bugs.python.org/issue27987> ___ ___ Python-bugs-list mailin

[issue36618] clang expects memory aligned on 16 bytes, but pymalloc aligns to 8 bytes

2019-04-12 Thread Gregory P. Smith
Gregory P. Smith added the comment: Even if you check for -fmax-type-align compiler support at configure time, there is a potential problem: Nothing guarantees that extension modules are built by the same compiler that CPython is. If CPython used an old clang without support for that flag

[issue36618] clang expects memory aligned on 16 bytes, but pymalloc aligns to 8 bytes

2019-04-12 Thread Gregory P. Smith
Gregory P. Smith added the comment: I believe -fno-max-type-align is also an option. -- ___ Python tracker <https://bugs.python.org/issue36618> ___ ___ Pytho

[issue16079] list duplicate test names with patchcheck

2019-04-14 Thread Gregory P. Smith
Change by Gregory P. Smith : -- pull_requests: +12752 stage: -> patch review ___ Python tracker <https://bugs.python.org/issue16079> ___ ___ Python-bugs-lis

[issue16079] list duplicate test names with patchcheck

2019-04-14 Thread Gregory P. Smith
Change by Gregory P. Smith : -- keywords: +easy versions: +Python 3.7, Python 3.8 -Python 3.3, Python 3.4 ___ Python tracker <https://bugs.python.org/issue16

[issue16079] list duplicate test names with patchcheck

2019-04-14 Thread Gregory P. Smith
Change by Gregory P. Smith : -- components: +Tests ___ Python tracker <https://bugs.python.org/issue16079> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue16079] list duplicate test names with patchcheck

2019-04-14 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset cd466559c4a312b3c1223a774ad4df19fc4f0407 by Gregory P. Smith in branch 'master': bpo-16079: fix duplicate test method name in test_gzip. (GH-12827) https://github.com/python/cpython/commit/cd466559c4a312b3c1223a774ad4df

[issue16079] list duplicate test names with patchcheck

2019-04-14 Thread Gregory P. Smith
Change by Gregory P. Smith : -- type: enhancement -> behavior ___ Python tracker <https://bugs.python.org/issue16079> ___ ___ Python-bugs-list mailing list Un

[issue16079] list duplicate test names with patchcheck

2019-04-15 Thread Gregory P. Smith
Gregory P. Smith added the comment: Agreed, making duplicate method definitions a CI failure is the desired end state once our test suite is cleaned up and it doesn't have false positives. FYI - pylint also implements this check quite reliably as function-redefined vi

[issue35866] concurrent.futures deadlock

2019-04-16 Thread Gregory P. Smith
Gregory P. Smith added the comment: Please do not blindly revert that. See my PR in https://bugs.python.org/issue36533 which is specific to this "issue" with logging. -- versions: +Python 3.8 ___ Python tracker <https://bu

[issue35866] concurrent.futures deadlock

2019-04-16 Thread Gregory P. Smith
Gregory P. Smith added the comment: I'd appreciate it if someone with an application running into the issue could be tested with my PR from issue36533 (https://github.com/python/cpython/pull/12704) applied. -- ___ Python tracker &

[issue35866] concurrent.futures deadlock

2019-04-17 Thread Gregory P. Smith
Gregory P. Smith added the comment: I am unable to get cf-deadlock.py to hang on my own builds of pure CPython 3.7.2+ d7cb2034bb or 3.6.8+ be77fb7a6e (versions i had in a local git clone). which specific python builds are seeing the hang using? Which specific platform/distro version

[issue35866] concurrent.futures deadlock

2019-04-17 Thread Gregory P. Smith
Gregory P. Smith added the comment: concurrent.futures.ProcessPoolExecutor uses both multiprocessing and threading. multiprocessing defaults to using os.fork(). -- ___ Python tracker <https://bugs.python.org/issue35

[issue35866] concurrent.futures deadlock

2019-04-17 Thread Gregory P. Smith
Gregory P. Smith added the comment: > "the single-threaded ProcessPoolExecutor test program" I doubt it is single threaded, the .submit() method appears to spawn a thread internally. -- ___ Python tracker <https://bugs.pytho

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-04-30 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset c4e671eec20dfcb29b18596a89ef075f826c9f96 by Gregory P. Smith in branch 'master': bpo-30458: Disallow control chars in http URLs. (GH-12755) https://github.com/python/cpython/commit/c4e671eec20dfcb29b18596a89ef07

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-04-30 Thread Gregory P. Smith
Gregory P. Smith added the comment: backports to older releases will need to be done manually and take care depending on how much of a concern tightening the existing abusive lenient behavior of the http.client API to enforce what characters are allowed in URLs is to stable releases. I

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-04-30 Thread Gregory P. Smith
Change by Gregory P. Smith : -- assignee: gregory.p.smith -> stage: patch review -> backport needed ___ Python tracker <https://bugs.python.org/i

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-05-01 Thread Gregory P. Smith
Change by Gregory P. Smith : -- stage: patch review -> backport needed ___ Python tracker <https://bugs.python.org/issue30458> ___ ___ Python-bugs-list mai

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-05-01 Thread Gregory P. Smith
Change by Gregory P. Smith : -- pull_requests: +12964 stage: backport needed -> patch review ___ Python tracker <https://bugs.python.org/issue30458> ___ ___ Py

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-05-01 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset b7378d77289c911ca6a0c0afaf513879002df7d5 by Gregory P. Smith in branch 'master': bpo-30458: Use InvalidURL instead of ValueError. (GH-13044) https://github.com/python/cpython/commit/b7378d77289c911ca6a0c0afaf5138

[issue36774] f-strings: Add a !d conversion for ease of debugging

2019-05-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: for reference, the discourse thread: https://discuss.python.org/t/f-string-debug-conversion/99/14 -- nosy: +gregory.p.smith ___ Python tracker <https://bugs.python.org/issue36

[issue36774] f-strings: Add a !d conversion for ease of debugging

2019-05-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: Steven: We shouldn't block this immediately useful feature from going in for f-strings on waiting for some much broader first class access to expressions feature. !d would be practical today. -- ___ P

[issue36774] f-strings: Add a !d conversion for ease of debugging

2019-05-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: hallway conversation with Eric: neither of us have immediately good thoughts on a spelling other than !d for this. !! or != seem esoteric and/or unparseable, using a capital letter like !D could be new and odd and might be useful to differentiate types

[issue36774] f-strings: Add a !d conversion for ease of debugging

2019-05-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: regarding issue28307 - It is not always correct to convert a %d %u %i used to render v into f'{int(v)}'. That'd lose the TypeError when v is not an integer. If you are looking at making internal private conversions for the purposes of that

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-05-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: A note from the urllib3 fixes to this: They chose to go the route of auto-%-encoding the offending characters in URLs instead. I do not think the stdlib should do this. One thing to note though is that they claim URLs with spaces embedded in them are

[issue11001] Various obvious errors in cookies documentation

2019-05-04 Thread Gregory P. Smith
Change by Gregory P. Smith : -- versions: +Python 3.7, Python 3.8 -Python 3.2, Python 3.3 ___ Python tracker <https://bugs.python.org/issue11001> ___ ___ Pytho

[issue36793] Do not define unneeded __str__ equal to __repr__

2019-05-05 Thread Gregory P. Smith
Change by Gregory P. Smith : -- nosy: +gregory.p.smith ___ Python tracker <https://bugs.python.org/issue36793> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36793] Do not define unneeded __str__ equal to __repr__

2019-05-05 Thread Gregory P. Smith
Change by Gregory P. Smith : -- type: -> enhancement ___ Python tracker <https://bugs.python.org/issue36793> ___ ___ Python-bugs-list mailing list Unsubscrib

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

2019-05-06 Thread Gregory P. Smith
New submission from Gregory P. Smith : test_httplib uses self-signed.pythontest.net in it's test_networked_good_cert test. On modern Linux distros (current Debian testing sid), the certificate it currently uses is rightfully rejected as being too weak: ERROR: test_networked_good

[issue35925] test_httplib test_nntplib test_ssl fail on ARMv7 Debian buster bot (OpenSSL 1.1.1a)

2019-05-06 Thread Gregory P. Smith
Gregory P. Smith added the comment: PR coming -- assignee: -> gregory.p.smith ___ Python tracker <https://bugs.python.org/issue35925> ___ ___ Python-bugs-lis

[issue35925] test_httplib test_nntplib test_ssl fail on ARMv7 Debian buster bot (OpenSSL 1.1.1a)

2019-05-06 Thread Gregory P. Smith
Change by Gregory P. Smith : -- keywords: +patch pull_requests: +13036 stage: needs patch -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

2019-05-06 Thread Gregory P. Smith
Change by Gregory P. Smith : -- keywords: +patch pull_requests: +13037 stage: needs patch -> patch review ___ Python tracker <https://bugs.python.org/issu

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

2019-05-06 Thread Gregory P. Smith
Gregory P. Smith added the comment: EWDurbin says I can just open a PR with new certs in the repo and it'll go from there. :) -- assignee: EWDurbin -> gregory.p.smith ___ Python tracker <https://bugs.python.org

[issue35925] test_httplib test_nntplib test_ssl fail on ARMv7 Debian buster bot (OpenSSL 1.1.1a)

2019-05-06 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset 2cc0223f43a1ffd59c887a73e2b0ce5202f3be90 by Gregory P. Smith in branch 'master': bpo-35925: Skip SSL tests that fail due to weak external certs. (GH-13124) https://github.com/python/cpython/commit/2cc0223f43a1ffd59c887a73e2b0ce

[issue35925] test_httplib test_nntplib test_ssl fail on ARMv7 Debian buster bot (OpenSSL 1.1.1a)

2019-05-06 Thread Gregory P. Smith
Gregory P. Smith added the comment: The merged PR basically skips the specific failing unit test cases of the ssl key strength check error is detected during these network tests. It should probably be backported into 3.6 and 2.7 to ease maintenance and trust of the buildbots on those

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset 7e200e0763f5b71c199aaf98bd5588f291585619 by Gregory P. Smith (Miro HronĨok) in branch '3.7': bpo-30458: Disallow control chars in http URLs. (GH-12755) (GH-13154) https://github.com/python/cpyt

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

2019-05-07 Thread Gregory P. Smith
Change by Gregory P. Smith : -- versions: -Python 3.7 ___ Python tracker <https://bugs.python.org/issue30458> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset 64aa6d2000665efb1a2eccae176df9520bf5f5e6 by Gregory P. Smith in branch 'master': bpo-36533: Reinit logging.Handler locks on fork(). (GH-12704) https://github.com/python/cpython/commit/64aa6d2000665efb1a2eccae176df9

[issue11001] Various obvious errors in cookies documentation

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: Thanks Julia! -- nosy: +gregory.p.smith resolution: -> fixed stage: patch review -> commit review status: open -> closed ___ Python tracker <https://bugs.python.or

[issue27432] Unittest truncating of error message not works

2019-05-07 Thread Gregory P. Smith
Change by Gregory P. Smith : -- assignee: Mariatta -> gregory.p.smith nosy: +gregory.p.smith ___ Python tracker <https://bugs.python.org/issue27432> ___ ___ Py

[issue27432] Unittest truncating of error message not works

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: safe_repr() as used internally by unittest wasn't intended to truncate by default as part of its "safety". The "safe" part is that it catches Exception and provides an alternate repr if the __repr__ raised. unittest.util.safe_rep

[issue27432] Support unittest assertion truncation of repr in error messages

2019-05-07 Thread Gregory P. Smith
Change by Gregory P. Smith : -- title: Unittest truncating of error message not works -> Support unittest assertion truncation of repr in error messages ___ Python tracker <https://bugs.python.org/issu

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-05-07 Thread Gregory P. Smith
Change by Gregory P. Smith : -- versions: -Python 3.8 ___ Python tracker <https://bugs.python.org/issue36533> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-05-07 Thread Gregory P. Smith
Change by Gregory P. Smith : -- pull_requests: +13086 ___ Python tracker <https://bugs.python.org/issue36533> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36838] running 'make html' from the Doc tree emits an unwelcoming error message

2019-05-07 Thread Gregory P. Smith
New submission from Gregory P. Smith : Running make in the Doc directory does not install all necessary tooling on its own. This is a hurdle to getting beginners up to speed on making documentation changes (often their very first changes in the CPython project). ``` :~/oss/cpython

[issue36838] running 'make html' from the Doc tree emits an unwelcoming error message

2019-05-07 Thread Gregory P. Smith
Change by Gregory P. Smith : -- assignee: -> gregory.p.smith ___ Python tracker <https://bugs.python.org/issue36838> ___ ___ Python-bugs-list mailing list Un

[issue36838] running 'make html' from the Doc tree emits an unwelcoming error message

2019-05-07 Thread Gregory P. Smith
Change by Gregory P. Smith : -- keywords: +patch pull_requests: +13089 stage: -> patch review ___ Python tracker <https://bugs.python.org/issue36838> ___ _

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: The regression should be fixed. It'd be helpful if owners of applications that were running into this could test their applications with this specific change. -- resolution: -> fixed stage: patch review -> commit review status: ope

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset 3b4b28efbde63502709bede7c5f9403ec6f37428 by Gregory P. Smith in branch '3.7': [3.7] bpo-36533: Reinit logging.Handler locks on fork(). (GH-12704) (GH-13170) https://github.com/python/cpython/commit/3b4b28efbde63502709bede7c5f940

[issue36838] running 'make html' from the Doc tree emits an unwelcoming error message

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: I noted this at the mentored sprints this year when I suggested my mentee "cd Doc ; make html" to show them how to build the docs, check that they build and see what they look like. Once upon a time we used to auto-fetch and install sphinx

[issue36838] running 'make html' from the Doc tree emits an unwelcoming error message

2019-05-07 Thread Gregory P. Smith
Change by Gregory P. Smith : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue36838] running 'make html' from the Doc tree emits an unwelcoming error message

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: New changeset 3918ad6b45da31e05265de5a455102276717c659 by Gregory P. Smith in branch 'master': bpo-36838: Suggest 'make venv' when missing Doc/ tools. (GH-13173) https://github.com/python/cpython/commit/3918ad6b45da31e05265

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

2019-05-07 Thread Gregory P. Smith
Gregory P. Smith added the comment: Updated cert+key committed to pythontestdotnet. reassigning to EWDurbin to see that they're deployed. https://github.com/python/pythontestdotnet/commit/2d121419796dad6d4285bf5aefd464aff0f47a91 -- assignee: gregory.p.smith -> EWDurbin re

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

2019-05-08 Thread Gregory P. Smith
Change by Gregory P. Smith : -- pull_requests: +13104 stage: commit review -> patch review ___ Python tracker <https://bugs.python.org/issue36816> ___ ___ Py

[issue35925] test_httplib test_nntplib test_ssl fail on ARMv7 Debian buster bot (OpenSSL 1.1.1a)

2019-05-08 Thread Gregory P. Smith
Gregory P. Smith added the comment: thats https://bugs.python.org/issue36816 (separate issue as our infrastructure is fixed to have a modern certificate). PR pending automerge post-CI. -- ___ Python tracker <https://bugs.python.org/issue35

<    16   17   18   19   20   21   22   23   24   25   >