aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* gh-99418: Make urllib.parse.urlparse enforce that a scheme must begin with ↵gentoo-3.10-7.3.15Miss Islington (bot)2024-01-152-1/+19
| | | | | | | | | | | | | | | an alphabetical ASCII character. (GH-99421) Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character. RFC 3986 defines a scheme like this: `scheme = ALPHA *( ALPHA / DIGIT / "+" / "-" / "." )` RFC 2234 defines an ALPHA like this: `ALPHA = %x41-5A / %x61-7A` The WHATWG URL spec defines a scheme like this: `"A URL-scheme string must be one ASCII alpha, followed by zero or more of ASCII alphanumeric, U+002B (+), U+002D (-), and U+002E (.)."` (cherry picked from commit 439b9cfaf43080e91c4ad69f312f21fa098befc7) Co-authored-by: Ben Kallus <49924171+kenballus@users.noreply.github.com>
* clear OpenSSL error if PY_EVP_MD_fetch() failedMichał Górny2024-01-151-0/+1
|
* gh-79096: Protect cookie file created by {LWP,Mozilla}CookieJar.save() ↵Pascal Wittmann2024-01-152-2/+33
| | | | | | | | | | | | | | | | | | | (GH-93463) Note: This change is not effective on Microsoft Windows. Cookies can store sensitive information and should therefore be protected against unauthorized third parties. This is also described in issue #79096. The filesystem permissions are currently set to 644, everyone can read the file. This commit changes the permissions to 600, only the creater of the file can read and modify it. This improves security, because it reduces the attack surface. Now the attacker needs control of the user that created the cookie or a ways to circumvent the filesystems permissions. This change is backwards incompatible. Systems that rely on world-readable cookies will breake. However, one could argue that those are misconfigured in the first place.
* Add a Gentoo hack for WHEEL_PKG_DIRVictor Stinner2024-01-151-0/+2
|
* _sysconfigdata: strip default CFLAGS and OPTMichał Górny2024-01-151-2/+2
|
* distutils: make -OO enable both opt-1 and opt-2 optimizationMichał Górny2024-01-152-10/+10
| | | | | Bug: http://bugs.python.org/issue27226 Bug: https://bugs.gentoo.org/585060
* merge py3.10 into release for v7.3.15release-pypy3.10-v7.3.15mattip2024-01-1487-2283/+1882
|\
| * Merge branch 'py3.9' into py3.10mattip2024-01-1423-877/+1007
| |\
| | * Merge branch 'main' into py3.9mattip2024-01-1420-870/+963
| | |\
| | | * update version to 7.3.16mattip2024-01-143-4/+4
| | | |
| | | * Merge pull request #4853 from mattip/unicode-overflow2Matti Picus2024-01-141-1/+1
| | | |\ | | | | | | | | | | undo more of 6906755
| | | | * undo more of 6906755mattip2024-01-141-1/+1
| | | | |
| | | * | Merge pull request #4851 from mattip/unicode-overflowMatti Picus2024-01-144-7/+22
| | | |\| | | | | | | | | | | revert 6906755 and skip untranslated tests
| | | | * skip another testmattip2024-01-131-0/+3
| | | | |
| | | | * revert 6906755 and skip untranslated testsmattip2024-01-133-4/+16
| | | | |
| | | | * fix compiler warningmattip2024-01-121-3/+3
| | | | |
| | | * | make gcd on ints and on rbigints elidableCF Bolz-Tereick2024-01-121-1/+2
| | | | |
| | | * | very minimal support for unsigned comparisons in the optimizerCF Bolz-Tereick2024-01-122-35/+48
| | | | |
| | | * | rewrite section on tail calls in the metainterpCF Bolz-Tereick2024-01-121-3/+4
| | | |/
| | | * Merge pull request #4848 from mattip/doc-v7.3.15Matti Picus2024-01-128-766/+897
| | | |\ | | | | | | | | | | add 7.3.15 draft release note, update sphinx issue extension
| | | | * update LICENSE and contributor.rst after adapting makecontributor.py to gitmattip2024-01-113-738/+725
| | | | |
| | | | * fix link, off-by-one in issue numbers when ported to githubmattip2024-01-111-1/+1
| | | | |
| | | | * add 7.3.15 draft release note, update sphinx issue extensionmattip2024-01-115-29/+173
| | | | |
| | | * | Merge pull request #4845 from andrewsmedina/medina/update_irc_server_addressMatti Picus2024-01-113-59/+4
| | | |\ \ | | | | |/ | | | |/| replace freenode.net references by libera.chat
| | | | * remove statistic_irc_logAndrews Medina2024-01-101-55/+0
| | | | |
| | | | * replace freenode.net references by libera.chatAndrews Medina2024-01-093-5/+5
| | | | |
| | * | | test now raises ValueError like in CPythonmattip2024-01-121-1/+1
| | | | |
| | * | | Merge pull request #4847 from mattip/issue-4826Matti Picus2024-01-112-1/+37
| | |\ \ \ | | | | | | | | | | | | Do not assign c-level slots when the python type has no function to assign
| | | * | | when type_reattach is called, do not asign empty slotsmattip2024-01-112-1/+37
| | | | | |
| | | * | | remove passing testmattip2024-01-111-38/+0
| | | | | |
| | | * | | add a passing testmattip2024-01-101-0/+38
| | |/ / /
| | * | | subtle fix for 'pypy -m venv --copies <target>' where the source is a ↵mattip2024-01-101-3/+6
| | | | | | | | | | | | | | | | | | | | symlinked venv
| | * | | Merge pull request #4846 from mattip/issue-4348Matti Picus2024-01-102-3/+3
| | |\ \ \ | | | | | | | | | | | | remove bogus file name from venv list
| | | * | | remove print from testmattip2024-01-101-2/+2
| | | | | |
| | | * | | remove bogus file name from venv listmattip2024-01-101-1/+1
| | |/ / /
| * | | | fix 249606d7mattip2024-01-101-6/+0
| | | | |
| * | | | merge py3.9 into py3.10mattip2024-01-0943-1371/+593
| |\| | |
| | * | | merge main into py3.9mattip2024-01-0921-1223/+147
| | |\| |
| | | * | Merge pull request #4842 from mattip/flakyMatti Picus2024-01-093-1/+5
| | | |\ \ | | | | |/ | | | |/| skip flaky test on CI
| | | | * add missing importmattip2024-01-091-0/+1
| | | | |
| | | | * skip flaky test on CImattip2024-01-093-1/+4
| | | |/
| | | * Merge branch 'branches/jit-tail-call-optimization'CF Bolz-Tereick2024-01-082-0/+96
| | | |\ | | | | | | | | | | | | | | | | | | | | | | | | | go tail call optimization in the metainterp while tracing. this will in particular mean storing fewer frames in the resume data and making blackholing and resuming for tracing bridges more efficient.
| | | | * Merge branch 'main' into branches/jit-tail-call-optimizationCF Bolz-Tereick2024-01-0480-495/+1741
| | | | |\
| | | | * \ merge defaultCarl Friedrich Bolz-Tereick2023-09-114-48/+95
| | | | |\ \
| | | | * | | do tail call optimization in the meta-tracerCarl Friedrich Bolz-Tereick2023-09-052-0/+96
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | this leaves the resulting code alone, however it means we - capture less resume data - re-construct fewer frames when blackholing median number of snapshots per trace goes down by 25% for a single benchmark (pypy pyinteractive.py -m test.pystone): here are some frames that we can remove in the pypy interpreter in this benchmark: 14286 W_TupleObjectUserDictWeakrefable.getdictvalue 12366 funccall__star_2 12346 get_and_call_function__star_1 10839 call_valuestack__AccessDirect_None 8656 funccall_valuestack__AccessDirect_None 8416 getattr 7375 fastfunc_descr_getattribute_2 6645 funccall__star_3 6441 PyFrame.__init__ 6440 PyFrame.run 6376 Function.call_obj_args 6376 dispatcher_funcrun_obj 4907 _type_isinstance 4513 _flat_pycall__AccessDirect_None 4372 get_and_call_function__star_2 2744 call_args 2270 call_function__star_3 2221 get 2181 _type_issubtype 2127 _call 1971 fastfunc_descr_property_get_3 1622 W_Root.getdictvalue 1112 BuiltinActivation_UwS_ObjSpace_W_Root_W_Root_W_Root._run 1092 BytesDictStrategy.getitem 1020 BytesDictStrategy.getitem_str 913 funccall__star_1 872 get_and_call_function__star_0 807 fastfunc_descr_member_get_3 744 W_TupleObjectUserDictWeakrefable.getdict 724 W_TypeObject.descr_getattribute 709 AbstractAttribute.read 661 W_Super.getattribute 661 fastfunc_getattribute_2 658 _ll_list_resize_hint_really_look_inside_iff__listPtr_Signed_Bool 588 setattr 508 PyCode.funcrun_obj 459 PyCode.funcrun 430 dispatcher_setdictvalue 429 W_BytesObject.descr_contains 402 KwargsDictStrategy.setitem_str 399 len 375 descr_startswith 331 W_BytesObject.descr_getitem 330 AbstractAttribute.write 329 CALL_FUNCTION__AccessDirect_None 328 AbstractAttribute._reorder_and_add_look_inside_iff 325 dispatch_bytecode__AccessDirect_None 314 makespecialisedtuple 271 int_w__pypy_interpreter_baseobjspace_W_Root 231 dispatcher_shortcut_
| | | * | | | move timing.py out of goal/CF Bolz-Tereick2024-01-073-3/+2
| | | | | | |
| | | * | | | make target loading a timed task tooCF Bolz-Tereick2024-01-071-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | (in pydrofoil it can take 15 min to load the target)
| | | * | | | fix test_destructor running on top of rpythonCF Bolz-Tereick2024-01-071-0/+3
| | | | | | |
| | | * | | | Merge pull request #4834 from pypy/branches/rpython-cleanups-githubCF Bolz-Tereick2024-01-0613-1219/+43
| | | |\ \ \ \ | | | | | | | | | | | | | | | | some small cleanups in rpython/: remove useless backendopts, speed up C tests, fix memory error check
| | | | * | | | fix typo in filenameCF Bolz-Tereick2024-01-061-0/+0
| | | | | | | |