[issue1298813] sysmodule.c: realpath() is unsafe

2011-08-21 Thread Mihai Ibanescu
Mihai Ibanescu added the comment: It's a real shame the original patch was not applied before py3k was branched, the code is now different. Antoine, my autoconf knowledge is limited, I don't know how you'd test for realpath accepting a NULL argument (and doing the right th

[issue4675] urllib's splitpasswd does not accept newline chars in passwords

2008-12-16 Thread Mihai Ibanescu
New submission from Mihai Ibanescu : According to http://www.ietf.org/rfc/rfc2617.txt section 2, in basic HTTP authentication the password can be any character (including newline). urllib does the following: _passwdprog = re.compile('^([^:]*):(.*)$') That should be changed to: _

[issue4675] urllib's splitpasswd does not accept newline chars in passwords

2008-12-16 Thread Mihai Ibanescu
Changes by Mihai Ibanescu : -- keywords: +patch Added file: http://bugs.python.org/file12371/splitpasswd.patch ___ Python tracker <http://bugs.python.org/issue4

[issue6478] time.tzset does not reset _strptime's locale time cache

2009-07-13 Thread Mihai Ibanescu
New submission from Mihai Ibanescu : If one changes from one timezone to another within the same python process, and if one tries to parse a time string that includes the timezone, the library malfunctions. See attached script for a reproducer. The problem is that, even though time.tzset() is

[issue1298813] sysmodule.c: realpath() is unsafe

2009-05-08 Thread Mihai Ibanescu
Mihai Ibanescu added the comment: Disclaimer: this bug is more than 3 years old, I don't remember all the details. Victor, solely reading the patch I see: +#ifdef HAVE_CANONICALIZE_FILE_NAME + free(argv0); +#endif /* HAVE_CANONICALIZE_FILE_NAME */ so argv0 (the string wher

[issue6478] time.tzset does not reset _strptime's locale time cache

2010-07-12 Thread Mihai Ibanescu
Mihai Ibanescu added the comment: Proposed patch attached. -- keywords: +patch Added file: http://bugs.python.org/file17964/_strptime.py.patch ___ Python tracker <http://bugs.python.org/issue6