[Python-Dev] Non-stable pyc results on python 3.6

2017-07-27 Thread jan matejek
hello, we're seeing strange problems when trying to do reproducible builds of some python 3.6 modules. Namely, from one build to another, there will be something like the following difference in the compiled object: 4e40 da 07 5f 5f 61 6c 6c 5f 5f da 0a 5f 5f 61 75 74 |..__all__..__aut|

Re: [Python-Dev] please consider changing --enable-unicode default to ucs4

2009-10-05 Thread Jan Matejek
Dne 20.9.2009 18:42, Antoine Pitrou napsal(a): > Le Sun, 20 Sep 2009 10:33:23 -0600, Zooko O'Whielacronx a écrit : >> >> By the way, I was investigating this, and discovered an issue on the >> Mandriva tracker which suggests that they intend to switch to UCS4 in >> the next release in order to av

Re: [Python-Dev] request for comments - standardization of python's purelib and platlib

2009-08-14 Thread Jan Matejek
Dne 13.8.2009 21:22, Brett Cannon napsal(a): > On Thu, Aug 13, 2009 at 11:23, Jan Matejek wrote: >> 1 - the traditional way >> purelib = /usr/lib/pythonX.Y/site-packages >> platlib = /usr/lib(64)/pythonX.Y/site-packages >> > > Why can't pure libraries g

[Python-Dev] request for comments - standardization of python's purelib and platlib

2009-08-13 Thread Jan Matejek
s into platform-dependent and platform-independent parts and save space on installation media + "idea compatibility" with perl and ruby, one less install layout to learn cons: - completely different from what we have now - would require the most work from both python

Re: [Python-Dev] Python security team

2008-09-29 Thread Jan Matejek
And that does not necessarily mean commit privileges, right? Or is this an issue of trust, where "we trust you enough to make changes to the core" equals "we also trust you enough to see the security issues" ? regards jan matejek -BEGIN PGP SIGNATURE

Re: [Python-Dev] tarfile and directory traversal vulnerability

2007-08-27 Thread Jan Matejek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lars Gustäbel wrote: > Suppose we have: > foo -> /etc > foo/passwd > > If creation of the foo symlink is delayed, foo/passwd will be > extracted in a directory foo which will be created implicitly. > If we create the foo symlink afterwards it will fa

Re: [Python-Dev] tarfile and directory traversal vulnerability

2007-08-27 Thread Jan Matejek
sequence (that is what GNU tar does) and extract the file locally. Setting absolutePaths to True would restore current behavior (no checks). regards, jan matejek -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.4-svn0 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

[Python-Dev] tarfile and directory traversal vulnerability

2007-08-24 Thread Jan Matejek
% tarinfo.name, RuntimeWarning, stacklevel=1) For extract(), i am not sure. Maybe it should throw exception when it encounters such file, and have a special option to extract such files anyway. Or maybe it should be left alone altogether. Any suggestions are welcome. regards jan matejek [1] h

Re: [Python-Dev] Python and the Linux Standard Base (LSB)

2006-11-27 Thread Jan Matejek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Phillip J. Eby napsal(a): > Just a suggestion, but one issue that I think needs addressing is the FHS > language that leads some Linux distros to believe that they should change > Python's normal installation layout (sometimes in bizarre ways) (...) >