| Commit message (Collapse) | Author | Age | Files | Lines |
|\ |
|
| |\ |
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| |\ \ |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | |\| |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | |\
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
sync httplib2 and urllib2 to cpython 2.7 git with security backports
See merge request pypy/pypy!754
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Sync httplib and urllib2 stdlib modules and the respective tests
to the current state of CPython 2.7 git (EOL-ed) + two patches
backported from 3.6 that are present in the Gentoo patchset. This has
only trivial changes compared to backporting the four relevant patches
and should make it easier to apply a final stdlib update post-release.
The Gentoo patches can be found as the two top patches on
https://gitweb.gentoo.org/fork/cpython.git/log/?h=gentoo-2.7.18-r2
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | |/
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
A corner case that produces a bogus loop containing getarrayitem_gc with
index -1, or with whatever index is given in the initial value of 'pos'.
Negative values would segfault; positive values would allocate '8 * pos'
bytes of memory however large the value is. Try to fix all these cases.
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | |
| | | |
| | | |
| | | | |
A non-fix as a skipped test for a similar, even-more-obscure case.
|
| | | |\
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Cross-compilation cleanups
See merge request pypy/pypy!750
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This probing logic tests for the existence of `gcc` and sets the value of
the 'CC' variable based on the results of that test, but many build pipelines
already define a value for 'CC' that they don't want overridden. Change this
probing logic to only set 'CC' if the environment variable doesn't already have
a specified value.
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Many cross-compilation setups use custom pkg-config wrappers to ensure that
the proper version of libraries get linked against. The conventional way to
specify such a wrapper is via the PKG_CONFIG environment variable, so change
the default pkg_config logic to use the contents of that variable if available.
|
| | | | | |
|
| | | | | |
|
| | |\ \ \ |
|
| | | | | | |
|
| | | | | | |
|
| |\ \ \ \ \
| | |/ / / /
| |/| | | | |
|
| | |\ \ \ \ |
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Sync email._header_value_parser, email._parseaddr and their respective
tests to include fixes for bpo-37461 and bpo-34155. The former is
DoS via infinite loop while parsing specially crafted email headers,
the latter is accepting domains containing '@'.
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Sync xmlrpc.server and the matching tset to CPython 3.6 branch to fix
bpo-38243, that is escape the server title when rendering as HTML.
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Sync cookiejar and matching tests to CPython 3.6 branch to fix bpo-38804
or REDoS in cookiejar.
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Sync uu, encodings.uu_codec and relevant tests to CPython 3.6 branch
to fix bpo-38945. This is a fix preventing newline in filename
from corrupting the output format.
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Sync asyncio.base_events and the matching test with CPython 3.6 branch
to fix bpo-37228. This includes the change banning reuse_address
parameter to loop.create_datagram_endpoint() because of security
concerns with doing that.
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Sync email.headerregistry module and the relevant test to CPython 3.6
branch. The only change is disallowing CR/LF
in email.headerregistry.Address that aims to prevent header injection.
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Sync http.client module as well as test_httplib and test_urllib
to include better CVE-2019-18348 protection via validating hostname
for control characters. This also includes refactoring of path
validation that makes it possible to override it.
|
| | |/ / / / |
|