[issue2636] Regexp 2.7 (modifications to current re 2.2.2)

2010-07-06 Thread Alex Willmer
Alex Willmer added the comment: On 6 July 2010 18:03, Matthew Barnett wrote: > The file at http://pypi.python.org/pypi/regex/ was downloaded 75 times, if > that's any help. (Now reset to 0 because of the bug fix.) > Each release was downloaded between 50 and 100 times. Matthew

[issue2636] Regexp 2.7 (modifications to current re 2.2.2)

2010-07-13 Thread Alex Willmer
Alex Willmer added the comment: On 13 July 2010 22:34, Jonathan Halcrow wrote: > The most recent version on pypi (20100709) seems to be missing _regex_core > from py_modules in setup.py. Sorry, my fault. I've uploaded a corrected version http://pypi.python.org/pypi/regex/0.1

[issue9227] can't import Tkinter / use IDLE after installing Python 2.7 on Mac OS X

2010-07-14 Thread Alex Rodriguez
Changes by Alex Rodriguez : -- nosy: +Alex.Rodriguez ___ Python tracker <http://bugs.python.org/issue9227> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue2636] Regexp 2.7 (modifications to current re 2.2.2)

2010-07-25 Thread Alex Willmer
Alex Willmer added the comment: On 25 July 2010 03:46, Matthew Barnett wrote: > issue2636-20100725.zip is a new version of the regex module. This is now packaged and uploaded to PyPI http://pypi.python.org/pypi/regex/0.1.20100725 -- ___ Pyt

[issue4913] wave.py: add writesamples() and readsamples()

2010-08-09 Thread Alex Robinson
Alex Robinson added the comment: Here go, Terry. Copies of the two files in the latest ZIP file. Hmmm. Well. Maybe just one of 'em. Looks like the only way to upload files is to add a msg, so I'll upload the other file in another msg. -- Added file: http://bugs.python.org

[issue4913] wave.py: add writesamples() and readsamples()

2010-08-09 Thread Alex Robinson
Alex Robinson added the comment: OK, here's the other. -- Added file: http://bugs.python.org/file18452/test_wave.py ___ Python tracker <http://bugs.python.org/i

[issue8631] subprocess.Popen.communicate(...) hangs on Windows

2010-08-09 Thread Alex Quinn
Alex Quinn added the comment: I am on Windows 7. I realized the "echo" command I'm piping to belongs to Cygwin. I'll try to make a different example to either support this, or otherwise close the bug. Thanks! -- ___ P

[issue28854] FIPS mode causes dead-lock in ssl module

2016-12-01 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex, dstufft, janssen ___ Python tracker <http://bugs.python.org/issue28854> ___ ___ Python-bugs-list mailing list Unsub

[issue29002] typing.AnyStr doc is unclear about python2 unicode support

2016-12-17 Thread Alex Jurkiewicz
New submission from Alex Jurkiewicz: The typing.AnyStr documentation: https://docs.python.org/3/library/typing.html#typing.AnyStr It gives some examples using u-strings (u'foo') but doesn't make explicit some subtleties about behaviour with Python 2. Specifically, with Python 2

[issue23242] asyncio: Process must close the transport when the process exit

2017-01-07 Thread Alex Grönholm
Changes by Alex Grönholm : -- nosy: +alex.gronholm versions: +Python 3.6 ___ Python tracker <http://bugs.python.org/issue23242> ___ ___ Python-bugs-list mailin

[issue23242] asyncio: Process must close the transport when the process exit

2017-01-07 Thread Alex Grönholm
Alex Grönholm added the comment: Are you sure this has been fixed? The attached script reproduces the bug 100% reliably on my laptop. -- Added file: http://bugs.python.org/file46198/read_subprocess.py ___ Python tracker <http://bugs.python.

[issue29136] Add OP_NO_TLSv1_3

2017-01-23 Thread Alex Gaynor
Alex Gaynor added the comment: We can easily just add `TLS13:...` at the from of our ciphersuite list and it'll be ok though right? (Note to self, do the same in urllib3, twisted, requests, god only knows what else) -- nosy: +alex ___ P

[issue11549] Build-out an AST optimizer, moving some functionality out of the peephole optimizer

2017-02-06 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: -alex ___ Python tracker <http://bugs.python.org/issue11549> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue29540] Add compact=True flag to json.dump/dumps

2017-02-12 Thread Alex Gordon
New submission from Alex Gordon: Broadly speaking, there are three main output styles for json.dump/dumps: 1. Default: json.dumps(obj) 2. Compact: json.dumps(obj, separators=(',', ':')) 3. Pretty-printing: json.dumps(obj, sort_keys=True, indent=4) The 'compact'

[issue29540] Add compact=True flag to json.dump/dumps

2017-02-14 Thread Alex Gordon
Alex Gordon added the comment: The point is that, as a principle of good API design, the json module should not generate malformed JSON unless the user very explicitly asks for their JSON to be corrupted. Python stands alone in having a JSON serializer that can produce strings such as {&q

[issue29505] Submit the re, json, & csv modules to oss-fuzz testing

2017-02-17 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue29505> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue29643] --enable-optimizations compiler flag has no effect

2017-02-24 Thread Alex Wang
New submission from Alex Wang: PR submitted here: https://github.com/python/cpython/pull/129 -- components: Build messages: 288535 nosy: awang priority: normal severity: normal status: open title: --enable-optimizations compiler flag has no effect type: behavior versions: Python 2.7

[issue29643] --enable-optimizations compiler flag has no effect

2017-02-24 Thread Alex Wang
Changes by Alex Wang : -- pull_requests: +253 ___ Python tracker <http://bugs.python.org/issue29643> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue29643] --enable-optimizations compiler flag has no effect

2017-02-24 Thread Alex Wang
Alex Wang added the comment: At least when I last built Python, configure always said that optimizations were not enabled regardless of whether I passed in the flag. >From what it looked like to me, it's because configure uses the $enableval >variable to store the result of th

[issue29682] Checks for null return value

2017-02-28 Thread Alex CHEN
New submission from Alex CHEN: Hi, Our tool reported a position that doesn't check for returned value (from a function that might returns null). might need a look that is there any problem or I am missing something. in function PyUnknownEncodingHandler of file pyexpat.c,

[issue27216] Fix capitalisation of "Python runtime" in os.path.islink description

2016-06-04 Thread Alex Chan
New submission from Alex Chan: Since Python is a proper noun, it should be capitalised. Fix a case where the docs used lowercase "python". The phrase "by the python runtime" was added in the 2.7 docs; the 2.6 docs just say "if symbolic links are not supported&quo

[issue27229] In tree cross-build fails copying Include/graminit.h to itself

2016-06-05 Thread Alex Willmer
New submission from Alex Willmer: While trying a cross compile of Python 3.6 I encountered the following alex@martha:~/src/cpython default☿ hg summary parent: 101753:31ad7885e2e5 Issue #27225: Fixed a reference leak in type_new when setting __new__ fails. branch: default commit: (clean

[issue26839] Python 3.5 running on Linux kernel 3.17+ can block at startup or on importing the random module on getrandom()

2016-06-07 Thread Alex Gaynor
Alex Gaynor added the comment: This doesn't look correct to me. Despite what the Linux maintainers insist, it's a _bug_ that /dev/urandom will return immediately if the system's entropy pool has never been seeded; one of the whole points of the getrandom syscall is that it

[issue26839] Python 3.5 running on Linux kernel 3.17+ can block at startup or on importing the random module on getrandom()

2016-06-07 Thread Alex Gaynor
Alex Gaynor added the comment: Repeating what a few other folks have said: the of os.urandom's callers shouldn't have to pay for the hash seed implementation. If Python internally is ok with suboptimal entropy, it should use a different function. Or early-boot Python users

[issue27250] Add os.urandom_block()

2016-06-07 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue27250> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue27249] Add os.urandom_info

2016-06-07 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue27249> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue26839] Python 3.5 running on Linux kernel 3.17+ can block at startup or on importing the random module on getrandom()

2016-06-07 Thread Alex Gaynor
Alex Gaynor added the comment: Colm -- how is that situation not addressed by fixing the hash seed generation specifically, rather than patching all consumers of os.urandom? -- ___ Python tracker <http://bugs.python.org/issue26

[issue27291] two heap corruption issue

2016-06-10 Thread Park Alex
New submission from Park Alex: Hello, I would like to report two heap corruption issue. Test environment: python ersion: python 2.7.11+ hg id: d858eadf2602 (2.7) compile: clang with ASAN OS: ubuntu x86_64 One is heap-buffer-overflow, the other is heap-user-after-free. All of samples are

[issue27291] two heap corruption issue

2016-06-11 Thread Park Alex
Park Alex added the comment: all of .pyc files had been altered by fuzzer. original py code is following: $ cat helloworld.py def hello(s=0x4142434445464748): print s if type(s) == str: print s.encode('hex') print repr(s) else: s = str(s) p

[issue27291] two heap corruption issues when running modified pyc code.

2016-06-11 Thread Park Alex
Park Alex added the comment: I totally agreed with your opinion. So I hesitated before reporting the issue (I thought) It's kinda, we have different point of view. As far as I can tell, python could be corrupted with .pyc like heap-use-after-free, buffer overrun and so on. Again, I a

[issue27291] two heap corruption issues when running modified pyc code.

2016-06-11 Thread Park Alex
Park Alex added the comment: oops, I cannot modify reply even I wrote it, want to fix tiny typo. I don't want to bother you guys, I respect python-dev as always. Thanks, -- Alex -- ___ Python tracker <http://bugs.python.org/is

[issue27336] --without-threads build fails due to undeclared _PyGILState_check_enabled

2016-06-16 Thread Alex Willmer
New submission from Alex Willmer: Building current tip (rev 102062:3d726dbfca31), on Ubuntu 16.04/x86_64, using --without-thread fails; with the following error gcc -c -Wno-unused-result -Wsign-compare -DNDEBUG -g -fwrapv -O3 -Wall -Wstrict-prototypes-Werror=declaration-after-statement

[issue27592] FIPS_mode() and FIPS_mode_set() functions in Python (ssl)

2016-07-22 Thread Alex Gaynor
Alex Gaynor added the comment: I'm opposed to adding FIPS knobs to Python's SSL module for a few reasons: - FIPS is a bad standard (which I'm happy to talk at length about) - OpenSSL is regularly on the verge of dropping FIPS support (https://www.openssl.org/blog/blog/2016/07/

[issue27701] [posixmodule] [Refactoring patch] Simply call into *at() functions unconditionally when present

2016-08-08 Thread Alex Willmer
Changes by Alex Willmer : -- nosy: +Alex.Willmer ___ Python tracker <http://bugs.python.org/issue27701> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue27766] Add ChaCha20 Poly1305 to SSL ciphers

2016-08-15 Thread Alex Gaynor
Alex Gaynor added the comment: So, for servers really what we care about is if the _client_ has PCLMULQDQ/AESNI, not whether the server itself does. Unfortunately, there's no sane way to do this. Haven't reviewed this patch in terribly much detail, but conceptually fine. Cory, we s

[issue27766] Add ChaCha20 Poly1305 to SSL ciphers

2016-08-15 Thread Alex Gaynor
Alex Gaynor added the comment: Simply doing AES-GCM before ChaCha20 is probably the simplest thing to start with, can always get fancier later. -- ___ Python tracker <http://bugs.python.org/issue27

[issue27766] Add ChaCha20 Poly1305 to SSL ciphers

2016-08-15 Thread Alex Gaynor
Alex Gaynor added the comment: Exposing it in some way would be good, but we can make that a seperate issue. -- ___ Python tracker <http://bugs.python.org/issue27

[issue27768] ssl: add public API for IA-32 processor capabilities vector

2016-08-22 Thread Alex Gaynor
Alex Gaynor added the comment: In this case, performance is security. Both AES-GCM and ChaCha20-Poly1305 are secure. Modulo one thing: GCM in software is hard to implement in constant-time, so it's strongly preferable to use it only when there's a hardware implementation. It works

[issue27850] Remove 3DES from cipher list (sweet32 CVE-2016-2183)

2016-08-24 Thread Alex Gaynor
Alex Gaynor added the comment: +! from me, removing 3DES is a totally sane default, people who need IE8+XP compat can change the default. -- ___ Python tracker <http://bugs.python.org/issue27

[issue27870] Left shift of zero allocates memory

2016-08-26 Thread Alex Groce
New submission from Alex Groce: Using a random testing system to compare Python long behavior to GMP (via gmpy2), I notice that in a low-memory situation (created by allocating many large integers in both Python and GMP), a left-shift of 0 by large number of bytes: - returns 0 via gmpy2

[issue26470] Make OpenSSL module compatible with OpenSSL 1.1.0

2016-08-26 Thread Alex Gaynor
Alex Gaynor added the comment: - The 2.7 patch contains numerous references to 3.6, these should be rewritten to 2.7.x - -- ___ Python tracker <https://bugs.python.org/issue26

[issue27870] Left shift of zero allocates memory

2016-08-26 Thread Alex Groce
Alex Groce added the comment: (to clarify: 0 << N allocates memory (which can fail, raising MemoryError) based on N. GMP simply returns 0 for any N. -- ___ Python tracker <https://bugs.python.org/i

[issue27870] Left shift of zero allocates memory

2016-08-26 Thread Alex Groce
Alex Groce added the comment: AND, right shift >> does not allocate memory, so there is a lack of symmetry that indicates the optimization might be desired. see https://github.com/agroce/tstl/tree/master/examples/gmpy2/leftshiftalloc.py vs. https://github.com/agroce/tstl/tree/master/ex

[issue27870] Left shift of zero allocates memory

2016-08-26 Thread Alex Groce
Alex Groce added the comment: Allocates, then fails to perform the operation (with MemoryError). Neither a crash nor resource allocation, precisely, just fails to carry out operation GMP integers can do under the same circumstances. -- ___ Python

[issue27870] Left shift of zero allocates memory

2016-08-26 Thread Alex Groce
Alex Groce added the comment: I mean a Python long. GMP mpz (via gmpy2) is supposed to be "drop-in" replacement, but it's choice to handle 0 << N even if N is too large to allocate (since you get back a 1-bit number, 0) seems reasonable, if not required for correct beh

[issue17338] Add length_hint parameter to list, dict, set constructors to allow efficient presizing

2013-03-02 Thread Alex Gaynor
New submission from Alex Gaynor: Following the length_hint PEP, we should expose this facility to end-python programmers. The semantics would be basically: the list has behavior identical to if you hadn't provided length_hint, except the VM is free to preallocate efficiently. CPython

[issue17338] Add length_hint parameter to list, dict, set constructors to allow efficient presizing

2013-03-02 Thread Alex Gaynor
Alex Gaynor added the comment: python-dev/ideas may be a better place to have this discussion, but basically if you're going to insist that stuff like this doesn't go into Python "because it isn't C++", people are going to have to write C++, and that makes me in

[issue17338] Add length_hint parameter to list, dict, set constructors to allow efficient presizing

2013-03-03 Thread Alex Gaynor
Alex Gaynor added the comment: That strategy only works if you know the exact count, it fails if you only have an estimate (as __length_hint__ gives you). -- ___ Python tracker <http://bugs.python.org/issue17

[issue17343] Add a version of str.split which returns an iterator

2013-03-03 Thread Alex Gaynor
New submission from Alex Gaynor: str.split returns a list, which is inefficient when you just want to process items one be one. You could emulate this with str.find and tracking indexes manually, but this should really be a builtin behavior. -- messages: 183411 nosy: alex priority

[issue17387] Error in C API documentation of PySequenceMethods

2013-03-08 Thread Alex Orange
New submission from Alex Orange: The documentation at http://docs.python.org/2/c-api/typeobj.html#PySequenceMethods is missing sq_slice between sq_item and sq_ass_item. This will mess up anyone trying to use anything after sq_item (that isn't using designated initial

[issue17387] Error in C API documentation of PySequenceMethods

2013-03-08 Thread Alex Orange
Alex Orange added the comment: If you look at the 2.7.3 version of that file: http://hg.python.org/cpython/file/70274d53c1dd/Include/object.h it has more information. It is a ssizessizeargfunc. I assume it passes the lower and upper bound and expects back a subsequence

[issue17387] Error in C API documentation of PySequenceMethods

2013-03-08 Thread Alex Orange
Alex Orange added the comment: Just to clarify though, that is entirely an assumption as to how it's supposed to be used. -- ___ Python tracker <http://bugs.python.org/is

[issue17387] Error in C API documentation of PySequenceMethods

2013-03-12 Thread Alex Orange
Alex Orange added the comment: I must admit I'm a little new to the development side of things. Can someone point me at a repo or something that the documentation files are in? I'm sort of guessing that the html is the processed output of

[issue17423] libffi on 32bit is broken on linux

2013-03-14 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue17423> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyth

[issue17423] libffi on 32bit is broken on linux

2013-03-16 Thread Alex Gaynor
Alex Gaynor added the comment: The patch has been merged into libffi upstream: https://github.com/atgreen/libffi/pull/32 -- ___ Python tracker <http://bugs.python.org/issue17

[issue17496] OS X test for Tk availability in runtktests.py doesn't work

2013-03-20 Thread Alex Gaynor
New submission from Alex Gaynor: If I run: $ python -mtest.test_tk I get a skip, after speaking with people familiar with OS X, it appears that the condition for the skip uses old Carbon APIs, which are totally deprecated under 64-bit. Attached is a patch which should work. -- files

[issue17513] astrike(*) in argv

2013-03-21 Thread Alex Gaynor
Alex Gaynor added the comment: This is a result of your shell automatically expeanding that, depending on what shell you use there'll be a way to escape the *. -- nosy: +alex resolution: -> invalid ___ Python tracker <http://bugs

[issue17576] PyNumber_Index() is not int-subclass friendly (or operator.index() docos lie)

2013-03-29 Thread Alex Gaynor
Alex Gaynor added the comment: In my opinion that should use PyLong_CheckExact -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue17576> ___ ___ Pytho

[issue17343] Add a version of str.split which returns an iterator

2013-04-05 Thread Alex Gaynor
Alex Gaynor added the comment: Raymond: Is that for the wrong ticket, or was the message incorrect? :) -- ___ Python tracker <http://bugs.python.org/issue17

[issue17655] Use writev() function in the io module

2013-04-07 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue17655> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyth

[issue17676] spwd uses -1 for empty attributes

2013-04-09 Thread Alex Waite
New submission from Alex Waite: spwd uses -1 rather than '' for empty attributes. This is different from the behaviour in the pwd module, and makes it more difficult to generate a new, valid shadow entry. In my opinion, simply doing a ':'.join(str(val) for val in rec)

[issue17701] Improving strftime documentation

2013-04-11 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue17701> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyth

[issue16694] Add pure Python operator module

2013-04-15 Thread Alex Gaynor
Alex Gaynor added the comment: If a pure python operator module were a part of the stdlib, we (PyPy) would probably delete most (if not all) of our own operator module. -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue16

[issue16659] Pure Python implementation of random

2013-04-16 Thread Alex Gaynor
Alex Gaynor added the comment: Looking at the patch (haven't actually benchmarked it), I have two concerns with respect to performance: a) The need for locking, this doesn't exist in the C or RPython versions because of the GIL. That locking is going to be distinctly un-free. b) Th

[issue17547] "checking whether gcc supports ParseTuple __format__... " erroneously returns yes with gcc 4.8

2013-04-20 Thread Alex Leach
Alex Leach added the comment: The configure.ac patch works for me, on x86_64 Arch Linux. I just updated to GCC-4.8.0 and came across an overwhelming number of these warnings when compiling extension modules. Thanks for the simple fix David. Tested on hg branch 2.7; the testsuite completes

[issue4934] tp_del and tp_version_tag undocumented

2013-04-20 Thread Alex Leach
Alex Leach added the comment: I've just ran into tp_version_tag, when running the boost python testsuite and wondered what it was... Since upgrading to GCC 4.8, I've started to get a lot more warnings with Python extensions, e.g.:- boost/python/opaque_pointer_converter.hpp:122:1

[issue17800] Add gc.needs_finalizing() to check if an object needs finalising

2013-04-20 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex, fijall ___ Python tracker <http://bugs.python.org/issue17800> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue17547] "checking whether gcc supports ParseTuple __format__... " erroneously returns yes with gcc 4.8

2013-04-24 Thread Alex Leach
Alex Leach added the comment: I don't think I can tell you anything you don't know already, but ... On Tue, 23 Apr 2013 19:38:18 +0100, Dave Malcolm wrote: > BTW, is that GCC format checking code available anywhere? Is this what you mean? http://gcc.gnu.org/viewcvs/gcc/trunk

[issue17853] Conflict between lexical scoping and name injection in __prepare__

2013-04-27 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue17853> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyth

[issue17947] Code, test, and doc review for PEP-0435 Enum

2013-05-10 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue17947> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyth

[issue17958] int(math.log(2**i, 2))

2013-05-11 Thread Alex Rhatushnyak
New submission from Alex Rhatushnyak: In Python 2.7.4: import math for i in range(40, 55): print int(math.log(2**i, 2)), output: 40 41 42 43 44 45 46 46 48 49 49 50 52 53 53 -- messages: 188976 nosy: Alex.Rhatushnyak priority: normal severity: normal status: open title: int(math.log

[issue17959] Alternate approach to aliasing for PEP 435

2013-05-11 Thread Alex Gaynor
Alex Gaynor added the comment: This would preclude code like: class Shape(Enum): rectangle = shape = 2 which seems (to me) to be the most reasonable way to express aliasing. -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue17

[issue17970] Mutlithread XML parsing cause segfault

2013-05-13 Thread Alex Gaynor
Alex Gaynor added the comment: It could also track tids and raise an error if you attempt to use it from multiple threads. -- nosy: +alex ___ Python tracker <http://bugs.python.org/issue17

[issue17947] Code, test, and doc review for PEP-0435 Enum

2013-05-13 Thread Alex Gaynor
Alex Gaynor added the comment: >From PyPy's perspective we don't really care what you name this particular >bikeshed, and it's probably not that important to us (in this particular case). As far as I know IronPython is the only Python VM that doesn't have _getframe(

[issue17984] io and _pyio modules require the _io module

2013-05-15 Thread Alex Gaynor
Alex Gaynor added the comment: I don't see why we need some C level _fileio, the os module has everythign we need. -- nosy: +alex ___ Python tracker <http://bugs.python.org/is

[issue18046] Simplify and clarify logging internals

2013-05-23 Thread Alex Gaynor
New submission from Alex Gaynor: This patch splits a dictionary that maps integer and string representations of levels to each other out into two dictionaries, one which goes int -> string, and the other which is string -> int. This makes it easier to reason about what a variable co

[issue18046] Simplify and clarify logging internals

2013-05-23 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +vinay.sajip ___ Python tracker <http://bugs.python.org/issue18046> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue18050] _sre.MAXREPEAT not defined in 2.7.3

2013-05-24 Thread Alex Burka
Changes by Alex Burka : -- nosy: +Alex.Burka ___ Python tracker <http://bugs.python.org/issue18050> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue22586] urljoin allow_fragments doesn't work

2014-10-09 Thread Alex Parrill
New submission from Alex Parrill: Passing False to the allow_fragments argument to urljoin doesn't remove fragments. Is this a bug, or am I misunderstanding the allow_fragments parameter? It's not perfectly clear what "fragment identifiers are not allowed" means (strips

[issue22559] [backport] ssl.MemoryBIO

2014-10-10 Thread Alex Gaynor
Alex Gaynor added the comment: Updated patch cherry-picks in some of the documentation updates that were pushed by Victor. -- Added file: http://bugs.python.org/file36868/issue22559.diff ___ Python tracker <http://bugs.python.org/issue22

[issue22618] urllib.parse.parse_qsl different results after urllib.parse.unquote

2014-10-12 Thread Alex Vaystikh
New submission from Alex Vaystikh: parsing query-string before and after cleaning with urllib.parse.unquote can have very different results: http://nbviewer.ipython.org/gist/bornio/e112e6d8d04dfed898c8 Perhaps it should be better documented, or make the method more idempotent

[issue22618] urllib.parse.parse_qsl different results after urllib.parse.unquote

2014-10-12 Thread Alex Vaystikh
Changes by Alex Vaystikh : -- type: -> behavior ___ Python tracker <http://bugs.python.org/issue22618> ___ ___ Python-bugs-list mailing list Unsubscrib

[issue22618] urllib.parse.parse_qsl different results after urllib.parse.unquote

2014-10-12 Thread Alex Vaystikh
Alex Vaystikh added the comment: It is much clearer after your insight: - I wasn't aware that 'parse_qs' unquotes values. That's most helpful! - I had no idea what 'keep_blank_values' were before your example, but now it couldn't be more obvious. I know that a

[issue22559] [backport] ssl.MemoryBIO

2014-10-12 Thread Alex Gaynor
Alex Gaynor added the comment: Would you be ok with it going into 2.7.10? The biggest argument in favor of this is that it significantly reduces the diff between 2.x and 3.x's SSL module, specifically it removes the one major difference between the two of

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-13 Thread Alex Gaynor
Alex Gaynor added the comment: Patch with the implementation, and initial work on documentation. Needs review please, I suspect we need more docs in more places. Feedback please! -- keywords: +needs review Added file: http://bugs.python.org/file36901/issue22417.diff

[issue22626] Documentation should point people to bugs. over HTTPS

2014-10-13 Thread Alex Gaynor
New submission from Alex Gaynor: Very simple patch. -- assignee: docs@python components: Documentation files: https.diff keywords: patch messages: 229266 nosy: alex, docs@python priority: normal severity: normal status: open title: Documentation should point people to bugs. over HTTPS

[issue22626] Documentation should point people to bugs. over HTTPS

2014-10-13 Thread Alex Gaynor
Changes by Alex Gaynor : -- resolution: -> fixed status: open -> closed ___ Python tracker <http://bugs.python.org/issue22626> ___ ___ Python-bugs-list

[issue22638] ssl module: the SSLv3 protocol is vulnerable ("POODLE" attack)

2014-10-14 Thread Alex Gaynor
Changes by Alex Gaynor : -- nosy: +christian.heimes, dstufft, giampaolo.rodola, janssen, pitrou ___ Python tracker <http://bugs.python.org/issue22638> ___ ___

[issue22638] ssl module: the SSLv3 protocol is vulnerable ("POODLE" attack)

2014-10-14 Thread Alex Gaynor
Alex Gaynor added the comment: This patch disables SSLv3 by default for Python. Uesrs can get it back by specifiying SSL_PROTOCOLv3 explicitly. -- keywords: +needs review, patch nosy: +alex Added file: http://bugs.python.org/file36926/issue22638.diff

[issue22638] ssl module: the SSLv3 protocol is vulnerable ("POODLE" attack)

2014-10-14 Thread Alex Gaynor
Alex Gaynor added the comment: create_default_context already disables SSLv3! (Good work everybody :-)) FWIW many vendors are already moving to disable SSLv3, e.g. cloudflare already did. -- ___ Python tracker <http://bugs.python.org/issue22

[issue22638] ssl module: the SSLv3 protocol is vulnerable ("POODLE" attack)

2014-10-14 Thread Alex Gaynor
Alex Gaynor added the comment: CloudFlare published some statistics: https://blog.cloudflare.com/sslv3-support-disabled-by-default-due-to-vulnerability/ -- ___ Python tracker <http://bugs.python.org/issue22

[issue22638] ssl module: the SSLv3 protocol is vulnerable ("POODLE" attack)

2014-10-14 Thread Alex Gaynor
Alex Gaynor added the comment: Debian is also considering this, and link some statistics on IE6 specifically (one of the, if not the single, largest SSLv3 users): https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765347 -- ___ Python tracker <h

[issue22638] ssl module: the SSLv3 protocol is vulnerable ("POODLE" attack)

2014-10-14 Thread Alex Gaynor
Alex Gaynor added the comment: It's been implemented in boringssl: https://boringssl.googlesource.com/boringssl/+/2970779684c6f164a0e261e96a3d59f331123320 I don't believe it's in OpenSSL though. -- ___ Python tracker <http

[issue22644] Update Windows installers to OpenSSL 1.0.1j

2014-10-15 Thread Alex Gaynor
New submission from Alex Gaynor: https://www.openssl.org/news/secadv_20141015.txt -- components: Extension Modules keywords: security_issue messages: 229462 nosy: alex, christian.heimes, dstufft, giampaolo.rodola, janssen, pitrou, steve.dower, tim.golden, zach.ware priority: normal

[issue22638] ssl module: the SSLv3 protocol is vulnerable ("POODLE" attack)

2014-10-18 Thread Alex Gaynor
Alex Gaynor added the comment: Benjamin, do you have an opinion on backporting this to 2.7? -- ___ Python tracker <http://bugs.python.org/issue22638> ___ ___ Pytho

[issue22660] Review ssl docs for security recommendations

2014-10-20 Thread Alex Gaynor
Alex Gaynor added the comment: Yes, that would be good. Need to make sure all the changes are completely applicable -- the SSLv3 change wasn't backported. -- ___ Python tracker <http://bugs.python.org/is

[issue22717] PySSL segmentation fault

2014-10-24 Thread Alex Gaynor
Alex Gaynor added the comment: Are you able to test this against the 2.7 branch from hg? The ssl module received some significant attention for 2.7.9. -- nosy: +alex, christian.heimes, dstufft, giampaolo.rodola, janssen, pitrou ___ Python tracker

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-30 Thread Alex Gaynor
Alex Gaynor added the comment: Patch now makes more precise assertions about the type of error that's occurring. -- Added file: http://bugs.python.org/file37077/issue22417.diff ___ Python tracker <http://bugs.python.org/is

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-30 Thread Alex Gaynor
Alex Gaynor added the comment: Updates to teh docs based on teh feedback from Antoine. -- Added file: http://bugs.python.org/file37081/issue22417.diff ___ Python tracker <http://bugs.python.org/issue22

[issue22417] PEP 476: verify HTTPS certificates by default

2014-10-31 Thread Alex Gaynor
Alex Gaynor added the comment: New version of the patch based on feedback from benjamin, should make it easier to do the 3.4 branch stuff. -- Added file: http://bugs.python.org/file37094/issue22417.diff ___ Python tracker <http://bugs.python.

<    9   10   11   12   13   14   15   16   17   >