[issue9201] IDLE: raises Exception TclError in a special case

2012-01-03 Thread Ned Deily
Ned Deily added the comment: The problem was originally reported in Issue4676 and fixed partly there and partly in Issue3851. -- nosy: +ned.deily resolution: -> duplicate stage: -> committed/rejected status: open -> closed superseder: -> python3 closes + home keys _

[issue13697] python RLock implementation unsafe with signals

2012-01-03 Thread Charles-François Natali
Charles-François Natali added the comment: > That sounds like a good solution in the middle-term. Are there any > drawbacks? (apart from launching a thread) Just to be clear: the approach I was suggesting is to have a resident thread dedicated to signal management, not to spawn a new one when n

[issue13703] Hash collision security issue

2012-01-03 Thread STINNER Victor
STINNER Victor added the comment: I read that the attack cannot be computed with actual computers (it's too expensive) against Python 64 bits. I tried to change str.__hash__ in Python 32 bits to compute the hash in 64 bits and than truncate the hash to 32 bits: it doesn't change anything, the

[issue13697] python RLock implementation unsafe with signals

2012-01-03 Thread STINNER Victor
STINNER Victor added the comment: > This affects the python implementation of RLock only. In the issue #13550, it was discussed to remove completly the logging machinery from the threading module. If we remove it, we don't need the Python implementation of RLock. We already removed the Pytho

[issue13697] python RLock implementation unsafe with signals

2012-01-03 Thread Robert Collins
Robert Collins added the comment: Normally I advocate very strongly for Python implementation of C accelerated modules, but when the two implementations are not equivalent, having a simpler Python one around does not help anyone (not users, other language implementors etc). True reentrancy is

[issue13558] multiprocessing package incompatible with PyObjC

2012-01-03 Thread Ned Deily
Ned Deily added the comment: Issue8713 proposes adding the option of using processes for multiprocessing rather than bare forks. Let's consolidate this issue with that one. -- resolution: -> duplicate stage: -> committed/rejected status: open -> closed superseder: -> multiprocessin

[issue13699] test_gdb has recently started failing

2012-01-03 Thread STINNER Victor
STINNER Victor added the comment: "test_gdb has started failing recently on my Ubuntu Natty system: ... >>> sysconfig.get_config_vars()['PY_CFLAGS'] '-Wno-unused-result -DNDEBUG -g -fwrapv -O3 -Wall -Wstrict-prototypes' ... Marking haypo as nosy since it might be related to recent changes for #1

[issue8713] multiprocessing needs option to eschew fork() under Linux

2012-01-03 Thread Ned Deily
Ned Deily added the comment: See also consolidated Issue13558 for additional justification for processes option on OS X. -- nosy: +mrmekon, ned.deily ___ Python tracker ___

[issue13556] When tzinfo.utcoffset is out-of-bounds, the exception message is misleading

2012-01-03 Thread Ned Deily
Changes by Ned Deily : -- nosy: +belopolsky, lemburg ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mai

[issue13697] python RLock implementation unsafe with signals

2012-01-03 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/

[issue13709] Capitalization mistakes in the documentation for ctypes

2012-01-03 Thread Eli Bendersky
Eli Bendersky added the comment: And while we're at it, I would consider revising both sentences in a more fundamental way, since they're too chatty for the official docs. -- nosy: +eli.bendersky ___ Python tracker

[issue13556] When tzinfo.utcoffset is out-of-bounds, the exception message is misleading

2012-01-03 Thread Alexander Belopolsky
Alexander Belopolsky added the comment: Is 3.3 message better? >>> datetime.now(tz=X()) Traceback (most recent call last): File "", line 1, in ValueError: offset must be a timedelta strictly between -timedelta(hours=24) and timedelta(hours=24). In 2.7, the message is indeed misleading: >>

[issue13707] Clarify hash() constancy period

2012-01-03 Thread Terry J. Reedy
Terry J. Reedy added the comment: Given that the doc says that use of hash() is to compare dict keys, it does not seem wrong to me to suggest that hash() should be usable to do so. I believe id() and consequently hash() are unique among builtins in being run-dependent. That is currently docum

[issue13702] relative symlinks in tarfile.extract broken (windows)

2012-01-03 Thread Brian Curtin
Changes by Brian Curtin : -- nosy: +brian.curtin stage: -> test needed ___ Python tracker ___ ___ Python-bugs-list mailing list Unsub

[issue13550] Rewrite logging hack of the threading module

2012-01-03 Thread Jesús Cea Avión
Changes by Jesús Cea Avión : -- nosy: +jcea ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.

[issue4188] test_threading hang when running as verbose

2012-01-03 Thread Jesús Cea Avión
Changes by Jesús Cea Avión : -- nosy: +jcea ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.o

[issue13707] Clarify hash() constancy period

2012-01-03 Thread Raymond Hettinger
Raymond Hettinger added the comment: -1 I concur with Martin. -- nosy: +rhettinger ___ Python tracker ___ ___ Python-bugs-list mailin

[issue13128] httplib debuglevel on CONNECT doesn't print response headers

2012-01-03 Thread Ned Deily
Changes by Ned Deily : -- stage: -> patch review ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.p

[issue13703] Hash collision security issue

2012-01-03 Thread Jesús Cea Avión
Changes by Jesús Cea Avión : -- nosy: +jcea ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.

[issue13710] hash() on string containing only null characters returns the length of the strings

2012-01-03 Thread Ramchandra Apte
Changes by Ramchandra Apte : -- title: hash() on string containing only null characters returns the length of the string -> hash() on string containing only null characters returns the length of the strings ___ Python tracker

[issue13710] hash() on strings containing only null characters returns the length of the strings

2012-01-03 Thread Ramchandra Apte
Changes by Ramchandra Apte : -- title: hash() on string containing only null characters returns the length of the strings -> hash() on strings containing only null characters returns the length of the strings ___ Python tracker

[issue13710] hash() on string containing only null characters returns the length of the string

2012-01-03 Thread Ramchandra Apte
New submission from Ramchandra Apte : If you run hash on strings containing only null characters it returns the length of the string >>> hash("\0") 1 >>> hash("\0\0") 2 >>> hash("\0"*1000) 1000 This behaviour is not like proper hash functions. The hashes of these strings should exhibit the avala

[issue13710] hash() on strings containing only null characters returns the length of the strings

2012-01-03 Thread Benjamin Peterson
Benjamin Peterson added the comment: No. Python's dictionary implementation is designed to handle hash functions with the properties of Python's. -- nosy: +benjamin.peterson resolution: -> rejected status: open -> closed ___ Python tracker

[issue13707] Clarify hash() constancy period

2012-01-03 Thread Jesús Cea Avión
Changes by Jesús Cea Avión : -- nosy: +jcea ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.

[issue13704] Random number generator in Python core

2012-01-03 Thread Jesús Cea Avión
Changes by Jesús Cea Avión : -- nosy: +jcea ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.

[issue13703] Hash collision security issue

2012-01-03 Thread STINNER Victor
STINNER Victor added the comment: Yet another random hash function, simplified version of Paul's function. It always use exactly 256 bits of entropy and so 32 bytes of memory, and doesn't keep the loop. I don't expect my function to be secure, but just give more work to the attacker to comput

[issue13710] hash() on strings containing only null characters returns the length of the strings

2012-01-03 Thread Jesús Cea Avión
Jesús Cea Avión added the comment: Object hashes are not crypto hashes. Use hashlib module for crypto. -- nosy: +jcea ___ Python tracker ___

[issue13696] [urllib.request.HTTPRedirectHandler.http_error_302] Relative Redirect issue

2012-01-03 Thread Senthil Kumaran
Senthil Kumaran added the comment: Here is the patch against 3.2. Something is wrong with the mercurial at the moment where 3.2 is shown as inactive. Once that is corrected, I shall commit and push this to 3.2 and cpython codelines. This bug is not present in 2.7 as different logic is followe

[issue13703] Hash collision security issue

2012-01-03 Thread Paul McMillan
Paul McMillan added the comment: A couple of things here: First, my proposed change is not cryptographically secure. There simply aren't any cryptographic hashing algorithms available that are in the performance class we need. My proposal does make the collision attack quite difficult to car

[issue13702] relative symlinks in tarfile.extract broken (windows)

2012-01-03 Thread Lars Gustäbel
Changes by Lars Gustäbel : -- assignee: -> lars.gustaebel nosy: +lars.gustaebel versions: +Python 3.3 ___ Python tracker ___ ___ Pyth

[issue13696] [urllib.request.HTTPRedirectHandler.http_error_302] Relative Redirect issue

2012-01-03 Thread Roundup Robot
Roundup Robot added the comment: New changeset 86141d28b20d by Senthil Kumaran in branch '3.2': Issue13696 - Fix 302 Redirection for Relative urls. http://hg.python.org/cpython/rev/86141d28b20d -- nosy: +python-dev ___ Python tracker

[issue13696] [urllib.request.HTTPRedirectHandler.http_error_302] Relative Redirect issue

2012-01-03 Thread Senthil Kumaran
Changes by Senthil Kumaran : -- resolution: -> fixed stage: test needed -> committed/rejected status: open -> closed ___ Python tracker ___ _

[issue13704] Random number generator in Python core

2012-01-03 Thread Raymond Hettinger
Raymond Hettinger added the comment: Why is this listed as a release blocker? It is questionable whether it should be done at all? It is a very aggressive change. -- ___ Python tracker _

<    1   2