[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Ramchandra Apte
Ramchandra Apte added the comment: On 31 October 2012 23:29, Mark Dickinson wrote: > > Mark Dickinson added the comment: > > Fixed the unuse of decorator syntax. I think the dummy_threading changes > should be considered a separate issue. > > With regards to the patch: I assume you mean "impo

[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Mark Dickinson
Mark Dickinson added the comment: I'm not quite sure why you're quoting the docs at me. What's the point you want to make? -- ___ Python tracker ___ ___

[issue16379] SQLite error code not exposed to python

2012-11-01 Thread Torsten Landschoff
New submission from Torsten Landschoff: The sqlite3 module does not expose the sqlite3 error codes to python. This makes it impossible to detect specific error conditions directly. Case in point: If a user selects some random file as the database in our application, we can not detect that it i

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Mark Dickinson
Mark Dickinson added the comment: Ramchandra: can you give an example of a realistic situation where the existence of this code in tkinter allows users to execute code *that they wouldn't be able to execute otherwise*? -- nosy: +mark.dickinson ___

[issue11566] hypot define in pyconfig.h clashes with g++'s cmath

2012-11-01 Thread Martin v . Löwis
Martin v. Löwis added the comment: In general, including standard library headers before including Python.h is not recommended, since it may break binary compatibility across object files. So the proposed work-around may also cause harm. -- ___ Pyth

[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Ramchandra Apte
Ramchandra Apte added the comment: On 1 November 2012 14:09, Mark Dickinson wrote: > > Mark Dickinson added the comment: > > I'm not quite sure why you're quoting the docs at me. What's the point > you want to make? > > -- > > ___ > Python tracker >

[issue16373] Recursion error comparing set() and collections.Set instances

2012-11-01 Thread Roundup Robot
Roundup Robot added the comment: New changeset 8e95a078d490 by Andrew Svetlov in branch '3.2': Issue #16373: Prevent infinite recursion for ABC Set class operations. http://hg.python.org/cpython/rev/8e95a078d490 New changeset 11a9297733b8 by Andrew Svetlov in branch '3.3': Merge issue #16373: Pr

[issue16373] Recursion error comparing set() and collections.Set instances

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Fixed. Thanks, Serhiy. -- nosy: +asvetlov resolution: -> fixed stage: patch review -> committed/rejected status: open -> closed ___ Python tracker

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Andrew Svetlov
Changes by Andrew Svetlov : -- nosy: +asvetlov ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyth

[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Mark Dickinson
Mark Dickinson added the comment: No. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org

[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Stefan Krah
Stefan Krah added the comment: Ramchandra Apte wrote: > > I'm not quite sure why you're quoting the docs at me. What's the point > > you want to make? > > Does decimal use the dummy_threading module where > deadlock might occur from a thread being created that blocks waiting for > another thre

[issue16261] Fix bare excepts in various places in std lib

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: I'm pretty sure Doc and Lib are already fixed, only Tools left. -- nosy: +asvetlov ___ Python tracker ___ __

[issue7317] Display full tracebacks when an error occurs asynchronously

2012-11-01 Thread Andrew Svetlov
Changes by Andrew Svetlov : -- nosy: +asvetlov ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pytho

[issue14965] super() and property inheritance behavior

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: I'm -0 for proposed changes, these changes reduce code readability from my perspective. I think better to use existing approach: explicitly specify what do you want to do with overloaded properties. -- nosy: +asvetlov _

[issue14266] pyunit script as shorthand for python -m unittest

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: +1 for both pyunit script and autodiscovering by default. -- nosy: +asvetlov ___ Python tracker ___

[issue16261] Fix bare excepts in various places in std lib

2012-11-01 Thread Ramchandra Apte
Ramchandra Apte added the comment: On 1 November 2012 17:21, Andrew Svetlov wrote: > > Andrew Svetlov added the comment: > > I'm pretty sure Doc and Lib are already fixed, only Tools left. > > -- > nosy: +asvetlov > > ___ > Python tracker >

[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Ramchandra Apte
Ramchandra Apte added the comment: On 1 November 2012 17:12, Stefan Krah wrote: > > Stefan Krah added the comment: > > Ramchandra Apte wrote: > > > I'm not quite sure why you're quoting the docs at me. What's the point > > > you want to make? > > > > Does decimal use the dummy_threading modul

[issue16218] Python launcher does not support non ascii characters

2012-11-01 Thread Roundup Robot
Roundup Robot added the comment: New changeset 02d25098ad57 by Andrew Svetlov in branch '3.3': Issue #16218: Support non ascii characters in python launcher. http://hg.python.org/cpython/rev/02d25098ad57 New changeset 1267d64c14b3 by Andrew Svetlov in branch 'default': Merge issue #16218: Suppor

[issue16218] Python launcher does not support non ascii characters

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Fixed. Thanks, Serhiy. -- nosy: +asvetlov resolution: -> fixed stage: patch review -> committed/rejected status: open -> closed ___ Python tracker

[issue16380] true/proper subset

2012-11-01 Thread abcdef
New submission from abcdef: The documentation http://docs.python.org/2.7/library/stdtypes.html#set-types-set-frozenset http://docs.python.org/3/library/stdtypes.html#set-types-set-frozenset of "<" for sets uses "true subset" and "true superset". The correct termininology is "proper subset" an

[issue16380] true/proper subset

2012-11-01 Thread Mark Dickinson
Mark Dickinson added the comment: +1 -- nosy: +mark.dickinson ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: h

[issue16284] concurrent.futures ThreadPoolExecutor keeps unnecessary references to worker functions.

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Updated patch to execute tests only for CPython. -- nosy: +asvetlov Added file: http://bugs.python.org/file27820/kill_reference_3.diff ___ Python tracker __

[issue16381] Introduce option to force the interpreter to exit upon MemoryErrors

2012-11-01 Thread Christian Theune
New submission from Christian Theune: I run long-running server processes (web apps, etc) a lot and I keep encountering the situation that many applications will not properly deal with MemoryError exceptions but end up in an unusable state. >From an operational perspective I wish the process i

[issue16381] Introduce option to force the interpreter to exit upon MemoryErrors

2012-11-01 Thread Christian Theune
Changes by Christian Theune : -- keywords: +patch Added file: http://bugs.python.org/file27821/9430a5c65114.diff ___ Python tracker ___ __

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: The patch LGTM except I cannot reproduce crash on unmodified sources with running applied test. -- nosy: +asvetlov ___ Python tracker ___ _

[issue16230] select.select crashes on resized lists

2012-11-01 Thread Andrew Svetlov
Changes by Andrew Svetlov : -- nosy: +asvetlov ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyth

[issue1207589] IDLE: Right Click Context Menu

2012-11-01 Thread Andrew Svetlov
Changes by Andrew Svetlov : -- nosy: +asvetlov ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.py

[issue16381] Introduce option to force the interpreter to exit upon MemoryErrors

2012-11-01 Thread Christian Heimes
Christian Heimes added the comment: Your proposal sounds like a very good idea. IMHO it should be discussed on the python-ideas or python-dev mailing list before it gets integrated into 3.4. Embrace yourself for some serious bike shedding! :) By the way your patch contains several changes that

[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Mark Dickinson
Mark Dickinson added the comment: > I just wanted to ensure that there wouldn't be any bugs by my patch. Okay, understood. Thanks. Please note that this issue is now closed, though: the 2.3 compatibility workarounds have been dealt with. The use or non-use of dummy_threading has nothing to

[issue9742] Python 2.7: math module fails to build on Solaris 9

2012-11-01 Thread Matt Selsky
Matt Selsky added the comment: I tested this patch again python 2.7.3 on Solaris 9 and the math module now builds correctly. Thanks! Let me know if you need any output. -- ___ Python tracker _

[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Ramchandra Apte
Ramchandra Apte added the comment: But my patch does use dummy_threading. -- ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue16381] Introduce option to force the interpreter to exit upon MemoryErrors

2012-11-01 Thread Christian Theune
Christian Theune added the comment: Grr. Sorry. The automatic patch extraction went wrong and I didn't notice. Here's a manual try. -- Added file: http://bugs.python.org/file27822/issue16381.diff ___ Python tracker

[issue16381] Introduce option to force the interpreter to exit upon MemoryErrors

2012-11-01 Thread Christian Theune
Changes by Christian Theune : Removed file: http://bugs.python.org/file27821/9430a5c65114.diff ___ Python tracker ___ ___ Python-bugs-list mai

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Ramchandra Apte
Ramchandra Apte added the comment: @Mark Dickinson Run the attached file, exploit.py, with normal priveleges and then run IDLE with sudo (something I did to actually uncover this bug!). Then the file "/root/exploited" should contain "Exploit succeeded!" -- Added file: http://bugs.python

[issue16382] Better warnings exception for bad category

2012-11-01 Thread Phil Elson
New submission from Phil Elson: When passing an invalid Warning subclasses to the warnings.warn function, a bare issubclass exception is raised: >>> import warnings >>> warnings.warn('hello world', 'not a valid warning type') Traceback (most recent call last): File "", line 1, in TypeError:

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Of course, this kind of bugs can cause unpredictable behavior, they do not have to lead to an immediate crash. This depends from the platform, the compiler and its options. On my computers the test always crashed, this is the maximum that I can say. -

[issue16381] Introduce option to force the interpreter to exit upon MemoryErrors

2012-11-01 Thread Christian Heimes
Christian Heimes added the comment: Thanks! Py_FatalError() might be too drastic for the task. It calls abort() which kills the process with SIGABRT. The function closes and flushes all stream but no additional cleanup code is executed. This might be bad for resources like shared memories, na

[issue16381] Introduce option to force the interpreter to exit upon MemoryErrors

2012-11-01 Thread Benjamin Peterson
Benjamin Peterson added the comment: I think the fatal erroring should be done in PyErr_NoMemory. -- nosy: +benjamin.peterson ___ Python tracker ___ _

[issue16165] sched.scheduler.run() blocks scheduler

2012-11-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : Removed file: http://bugs.python.org/file27490/sched_unblock.patch ___ Python tracker ___ ___ Python-bugs-list m

[issue16165] sched.scheduler.run() blocks scheduler

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Tests added. Please review. -- keywords: +needs review Added file: http://bugs.python.org/file27825/sched_unblock_2.patch ___ Python tracker

[issue16215] Possible double memory free in str.replace

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Please review. -- keywords: +needs review ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue16165] sched.scheduler.run() blocks scheduler

2012-11-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : Removed file: http://bugs.python.org/file27825/sched_unblock_2.patch ___ Python tracker ___ ___ Python-bugs-list

[issue16165] sched.scheduler.run() blocks scheduler

2012-11-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : Added file: http://bugs.python.org/file27826/sched_unblock_2.patch ___ Python tracker ___ ___ Python-bugs-list m

[issue16218] Python launcher does not support non ascii characters

2012-11-01 Thread Vinay Sajip
Vinay Sajip added the comment: I'm not especially familiar with this code, but just trying to understand - how come filename_obj isn't decref'd on normal exit? -- nosy: +vinay.sajip ___ Python tracker

[issue10182] match_start truncates large values

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Please review. -- keywords: +needs review ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue16245] Update html.entities.html5 dictionary and parseentities.py

2012-11-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- nosy: -serhiy.storchaka ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http:

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Mark Dickinson
Mark Dickinson added the comment: Okay, but if a user can run IDLE with sudo, they presumably *already* have many other ways to use sudo to create files in /root, without using IDLE or tkinter. That's why I said: "*that they wouldn't be able to execute otherwise*". I don't see the security

[issue16218] Python launcher does not support non ascii characters

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Vinay, it's processed in PyObject_CallFunction(loader_type, "sN", "__main__", filename_obj) Please note "sN" format istead "sO". "N" means PyObject* is passed but unlike "sO" that object is not increfed. -- ___ Pytho

[issue14900] cProfile does not take its result headers as sort arguments

2012-11-01 Thread Arne Babenhauserheide
Arne Babenhauserheide added the comment: …you were faster than me (I only managed to get the repo onto my current computer yesterday and the children kept me occupied). Thank you! -- ___ Python tracker _

[issue14900] cProfile does not take its result headers as sort arguments

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: No problems! -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.p

[issue16376] wrong type for wintypes.BYTE

2012-11-01 Thread Santoso Wijaya
Changes by Santoso Wijaya : -- versions: +Python 3.4, Python 3.5 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue16376] wrong type for wintypes.BYTE

2012-11-01 Thread Santoso Wijaya
Changes by Santoso Wijaya : -- type: -> behavior ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.p

[issue16218] Python launcher does not support non ascii characters

2012-11-01 Thread Vinay Sajip
Vinay Sajip added the comment: > Please note "sN" format istead "sO". I see. Thanks. -- ___ Python tracker ___ ___ Python-bugs-list m

[issue16383] Python 3.3 Permission Error with User Library on Windows

2012-11-01 Thread Jim Pattee
New submission from Jim Pattee: Python 3.3 Permission Error with User Library on Windows I have certain scripts that run without error on Python 2.7 and 3.2. With Python 3.3 they get a "Permission Error". This does not occur with every script. The difference seems to be that the ones with a pr

[issue13701] Remove Decimal Python 2.3 Compatibility

2012-11-01 Thread Martin v . Löwis
Martin v. Löwis added the comment: Ramchandra: Your patch wasn't actually used to resolve this issue. Please see http://hg.python.org/cpython/rev/7ada0faded9b for the change that Mark *actually* made to resolve the issue. There were actually a number of problems with your patch, but there is l

[issue16382] Better warnings exception for bad category

2012-11-01 Thread Antoine Pitrou
Changes by Antoine Pitrou : -- nosy: +brett.cannon ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.

[issue16383] Python 3.3 Permission Error with User Library on Windows

2012-11-01 Thread R. David Murray
R. David Murray added the comment: Can you post the error, please? -- nosy: +r.david.murray type: crash -> behavior ___ Python tracker ___ ___

[issue15872] shutil.rmtree(..., ignore_errors=True) doesn't ignore all errors

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Here is a new patch. It contains some other minor changes. rmtree behavior unified for system with and without at-functions. -- stage: needs patch -> patch review Added file: http://bugs.python.org/file27828/shutil_rmtree_2.patch

[issue15873] "datetime" cannot parse ISO 8601 dates and times

2012-11-01 Thread kirpit
Changes by kirpit : -- nosy: +kirpit ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mai

[issue16384] import.c doesn't handle EOFError from PyMarshal_Read*

2012-11-01 Thread Sye van der Veen
New submission from Sye van der Veen: The PyMarshal_Read* functions raise EOFError when the end of the file is unexpectedly met. The current import.c functions propagate this error when reading .pyc or .pyo files. One consequence of this is that Python will abort on startup if, say, encoding

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Roundup Robot
Roundup Robot added the comment: New changeset 3672db224eb3 by Antoine Pitrou in branch '3.2': Issue #16228: Fix a crash in the json module where a list changes size while it is being encoded. http://hg.python.org/cpython/rev/3672db224eb3 New changeset 7528c02b8d52 by Antoine Pitrou in branch '

[issue15067] Clean up the sqlite3 docs

2012-11-01 Thread Zachary Ware
Zachary Ware added the comment: Coming back to this 5 months later and looking into it myself, I find that the sqlite3 docs really need a bit of a cleanup all around, especially in all three 3.x branches. Several minor changes were made by Raymond Hettinger in d229032dc213 and a few subsequen

[issue15067] Clean up the sqlite3 docs

2012-11-01 Thread Zachary Ware
Changes by Zachary Ware : Added file: http://bugs.python.org/file27830/sqlite3_cleanup_3.2.patch ___ Python tracker ___ ___ Python-bugs-list m

[issue16281] TODO in tailmatch(): it does not support backward in all cases

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: The result does not depend on the direction of comparison. This only affects speed. But who can to say in which direction comparison will be faster? Here I see a one obvious opportunity for optimization: if (kind_self < kind_sub) return 0; After

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Roundup Robot
Roundup Robot added the comment: New changeset 33ae62a4ecf5 by Antoine Pitrou in branch '2.7': Issue #16228: Fix a crash in the json module where a list changes size while it is being encoded. http://hg.python.org/cpython/rev/33ae62a4ecf5 -- ___ Pyth

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: Thank you for noticing this, and for writing a patch. -- resolution: -> fixed stage: patch review -> committed/rejected status: open -> closed ___ Python tracker _

[issue15067] Clean up the sqlite3 docs

2012-11-01 Thread Zachary Ware
Zachary Ware added the comment: I failed to mention, the 3.2 patch also removes the line (and comment) about "db_row based solutions" since it seems from a quick Google search that "db_row" is a library created back in the 2.2 days that I didn't quickly see a 3.x version for. Also, the commen

[issue14893] Tutorial: Add function annotation example to function tutorial

2012-11-01 Thread Zachary Ware
Changes by Zachary Ware : -- versions: +Python 3.4 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Hi, I'm ok with patch but I guess to add some comment in C code to prevent, hmm, back optimization from upcoming contributor. The same for #16230 -- ___ Python tracker __

[issue16230] select.select crashes on resized lists

2012-11-01 Thread Roundup Robot
Roundup Robot added the comment: New changeset 87ccf2635ad7 by Antoine Pitrou in branch '3.2': Issue #16230: Fix a crash in select.select() when one the lists changes size while iterated on. http://hg.python.org/cpython/rev/87ccf2635ad7 New changeset 717660ec8f67 by Antoine Pitrou in branch '3.

[issue16230] select.select crashes on resized lists

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: Committed, thank you! -- nosy: +pitrou resolution: -> fixed stage: patch review -> committed/rejected status: open -> closed ___ Python tracker ___

[issue14893] Tutorial: Add function annotation example to function tutorial

2012-11-01 Thread Roundup Robot
Roundup Robot added the comment: New changeset 2bf99322218f by Andrew Svetlov in branch '3.2': Issue #14893: Add function annotation example to function tutorial. http://hg.python.org/cpython/rev/2bf99322218f New changeset 45167091b5f9 by Andrew Svetlov in branch '3.3': Merge issue #14893: Add f

[issue14893] Tutorial: Add function annotation example to function tutorial

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Fixed. Thanks, Zachary. -- nosy: +asvetlov resolution: -> fixed stage: patch review -> committed/rejected status: open -> closed ___ Python tracker ___

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Zachary Ware
Zachary Ware added the comment: If I understand correctly, I think what Ramchandra is getting at is that if an attacker could manage to get a .Tk.py file into a user's home directory somehow, then the next time that user happens to do 'sudo idle', the attacker's code is executed with root priv

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: > Hi, I'm ok with patch but I guess to add some comment in C code to > prevent, hmm, back optimization from upcoming contributor. > The same for #16230 But that's what tests are for. -- ___ Python tracker

[issue16261] Fix bare excepts in various places in std lib

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Sorry, looks like I don't understood you correctly. Do you want to replace `except:` to `except Exception` or something else? -- ___ Python tracker

[issue16383] Python 3.3 Permission Error with User Library on Windows

2012-11-01 Thread Jim Pattee
Jim Pattee added the comment: Python 3.3 (64bit) Traceback (most recent call last): File "file-py\astyle-protected.py", line 157, in process_files() File "file-py\astyle-protected.py", line 30, in process_files get_header_variables(header_variables, header_path) File "file-py\asty

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: As I said tests was not crashed on my linux 64 bit Ubuntu with buggy code. -- ___ Python tracker ___ ___

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: > As I said tests was not crashed on my linux 64 bit Ubuntu with buggy code. They crashed duly here in debug mode (64-bit Linux). -- ___ Python tracker ___

[issue14893] Tutorial: Add function annotation example to function tutorial

2012-11-01 Thread Zachary Ware
Zachary Ware added the comment: Thank you Éric for the approval, and Andrew for the commit! -- ___ Python tracker ___ ___ Python-bugs-

[issue15067] Clean up the sqlite3 docs

2012-11-01 Thread Ezio Melotti
Ezio Melotti added the comment: I think it would be better to keep the capitalization of the queries separate from the rest of the patch. -- nosy: +ezio.melotti stage: -> patch review type: -> enhancement ___ Python tracker

[issue16380] true/proper subset

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Fixed in 56c3ab6f7f07, 56c3ab6f7f07, fa7311caa203, 7dda9dc5e830 Thanks. -- nosy: +asvetlov resolution: -> fixed stage: -> committed/rejected status: open -> closed versions: +Python 3.2, Python 3.4 ___ Python tracke

[issue12759] "(?P=)" input for Tools/scripts/redemo.py raises unnhandled exception

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Here is an updated patch. More appropriate error message used, many new tests added. -- keywords: +patch stage: needs patch -> patch review versions: +Python 3.4 Added file: http://bugs.python.org/file27831/sre_empty_group_name.patch

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: As Zachary and Ramchandra explained, the security issue is obvious: a non-sudoer user A can make a sudoer user B execute arbitrary code, simply by placing a file where IDLE will be run from. This is the same reason Python has -s and -E options. The least we co

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: I have python built with Py_DEBUG (./configure --with-pydebug) What I' missed? I'm ok with status quo but just want to understand how to configure my build properly. -- ___ Python tracker

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Mark Dickinson
Mark Dickinson added the comment: And then user A is relying on user B executing IDLE via sudo? Is that a normal thing to do? -- ___ Python tracker ___

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: > And then user A is relying on user B executing IDLE via sudo? Is that > a normal thing to do? Well, I suppose that could be any Tk app, not just IDLE. And I also suppose you could use IDLE to edit some file that is only root-writable. -- ___

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Mark Dickinson
Mark Dickinson added the comment: So if this is a security issue, should Python 2.6 also be fixed? -- ___ Python tracker ___ ___ Pytho

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: > I have python built with Py_DEBUG (./configure --with-pydebug) > What I' missed? > I'm ok with status quo but just want to understand how to configure my build > properly. Well, I don't know. Perhaps a different compiler version, a different libc, or perhaps

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: > So if this is a security issue, should Python 2.6 also be fixed? Probably, if it's deemed important enough by our security RMs. -- ___ Python tracker ___

[issue16228] JSON crashes during encoding resized lists

2012-11-01 Thread Andrew Svetlov
Andrew Svetlov added the comment: Ok. Thanks. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.py

[issue16383] Python 3.3 Permission Error with User Library on Windows

2012-11-01 Thread R. David Murray
R. David Murray added the comment: Is it possible you installed 3.3 differently? For example 3.2 and 2.7 installed for all users and 3.3 for just you, or vice versa? >From the looks of the traceback there really is a permission problem with the >file, since it is failing on a normal open. (I

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Stefan Krah
Stefan Krah added the comment: Isn't IDLE supposed to be a Python shell? As I understand this issue, you'd have the same "exploit" by adding this to your .bashrc: echo "EXPLOIT" > /root/exploit Then, as a normal user, run: sudo bash It would be nice to get rid of the exec, but why is this

[issue13301] the script Tools/i18n/msgfmt.py allows arbitrary code execution via po files

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Here is a more simpler patch. Please approve, it's a really trivial patch. -- stage: needs patch -> patch review Added file: http://bugs.python.org/file27832/msgfmt_literal_eval.patch ___ Python tracker

[issue15581] curses: segfault in addstr()

2012-11-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- nosy: +haypo stage: -> needs patch type: -> crash ___ Python tracker ___ ___ Python-bugs-list maili

[issue16248] Security bug in tkinter allows for untrusted, arbitrary code execution.

2012-11-01 Thread Antoine Pitrou
Antoine Pitrou added the comment: As I understand it, this is not specifically about IDLE. Any Tk app would be vulnerable. -- ___ Python tracker ___

[issue16151] Deferred KeyboardInterrupt in interactive mode

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Amaury, run the followed commands: import readline, rlcompleter readline.parse_and_bind('tab: complete') Hint: you can add this to your .pythonrc.py. -- ___ Python tracker

[issue8402] Add a function to escape metacharacters in glob/fnmatch

2012-11-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- assignee: docs@python -> components: -Documentation keywords: +needs review resolution: invalid -> stage: -> patch review ___ Python tracker _

[issue13454] crash when deleting one pair from tee()

2012-11-01 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Please review. -- keywords: +needs review ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue15114] Deprecate strict mode of HTMLParser

2012-11-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- nosy: -serhiy.storchaka ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http:

  1   2   >