Mailman 3 December 2008 - Python-Dev

ANN: new python-porting mailing list
by Georg Brandl Dec. 5, 2008

Dec. 5, 2008

Hi all, to facilitate discussion about porting Python code between different versions (mainly of course from 2.x to 3.x), we've created a new mailing list python-porting(a)python.org It is a public mailing list open to everyone. We expect active participation of many people porting their libraries/programs, and hope that the list can be a help to all wanting to go this (not always smooth :-) way. @python-dev: it would of course be nice to have more than a few developers on that list ;-) regards, Georg -- Thus spake the Lord: Thou shalt indent with four spaces. No more, no less. Four shall be the number of spaces thou shalt indent, and the number of thy indenting shall be four. Eight shalt thou not indent, nor either indent thou two, excepting that thou then proceed to four. Tabs are right out.

3 3

Summary of Python tracker Issues
by Python tracker Dec. 5, 2008

Dec. 5, 2008

ACTIVITY SUMMARY (11/28/08 - 12/05/08) Python tracker at http://bugs.python.org/ To view or respond to any of the issues listed below, click on the issue number. Do NOT respond to this message. 2233 open (+55) / 14139 closed (+41) / 16372 total (+96) Open issues with patches: 753 Average duration of open issues: 705 days. Median duration of open issues: 2193 days. Open Issues Breakdown open 2214 (+54) pending 19 ( +1) Issues Created Or Reopened (96) _______________________________ Coding cookie crashes IDLE 11/28/08 CLOSED http://bugs.python.org/issue4454 created tjreedy No Windows List in IDLE if several windows have the same title 11/28/08 CLOSED http://bugs.python.org/issue4455 created amaury.forgeotdarc patch xmlrpc is broken 11/28/08 CLOSED http://bugs.python.org/issue4456 created benjamin.peterson __import__ documentation obsolete 11/29/08 http://bugs.python.org/issue4457 created stevenjd getopt.gnu_getopt() loses dash argument 11/29/08 CLOSED http://bugs.python.org/issue4458 created muntyan bdist_rpm assumes python 11/29/08 http://bugs.python.org/issue4459 created John5342 The parameter of PyInt_AsSsize_t() is not checked to see if it i 11/29/08 CLOSED http://bugs.python.org/issue4460 created CWRU_Researcher1 parameters of PyLong_FromString() are not checked for NULL 11/29/08 http://bugs.python.org/issue4461 created CWRU_Researcher1 patch result of PyList_GetItem() not validated 11/29/08 CLOSED http://bugs.python.org/issue4462 created CWRU_Researcher1 Parameters and result of PyList_GetItem() are not validated 11/29/08 CLOSED http://bugs.python.org/issue4463 created CWRU_Researcher1 PyList_GetItem() result and parameters not fully validated 11/29/08 CLOSED http://bugs.python.org/issue4464 created CWRU_Researcher1 The result of set_copy() is not checked for NULL 11/29/08 CLOSED http://bugs.python.org/issue4465 created CWRU_Researcher1 The return value of PyFile_FromFile is not checked for NULL 11/29/08 CLOSED http://bugs.python.org/issue4466 created CWRU_Researcher1 return value of PyUnicode_AsEncodedString() is not checked for N 11/29/08 CLOSED http://bugs.python.org/issue4467 created CWRU_Researcher1 Restore chapter enumeration in Python docs 11/30/08 CLOSED http://bugs.python.org/issue4468 created schluehk CVE-2008-5031 multiple integer overflows 11/30/08 http://bugs.python.org/issue4469 created doko smtplib SMTP_SSL not working. 11/30/08 http://bugs.python.org/issue4470 created lcatucci patch IMAP4 missing support for starttls 11/30/08 http://bugs.python.org/issue4471 created lcatucci patch Is shared lib building broken on trunk? 11/30/08 http://bugs.python.org/issue4472 created skip.montanaro POP3 missing support for starttls 11/30/08 http://bugs.python.org/issue4473 created lcatucci patch PyUnicode_FromWideChar incorrect for characters outside the BMP 11/30/08 http://bugs.python.org/issue4474 created marketdickinson More verbose error message for Py_FindMethod 11/30/08 http://bugs.python.org/issue4475 created gpolo patch compileall.py fails if current dir has a "types" subdir with 3. 12/01/08 http://bugs.python.org/issue4476 created aivazis Speed up PyEval_EvalFrameEx when tracing is off. 12/01/08 http://bugs.python.org/issue4477 created jyasskin patch, needs review shutil.copyfile documentation 12/01/08 CLOSED http://bugs.python.org/issue4478 created steve21 True division is not smart -> proposing smart True division 12/01/08 CLOSED http://bugs.python.org/issue4479 created nassrat bdist_msi and bdist_wininst are missing an uninstaller icon 12/01/08 http://bugs.python.org/issue4480 created lemburg Windows installer crash 12/01/08 http://bugs.python.org/issue4481 created Konam 10e667.__format__('+') should return 'inf' 12/01/08 http://bugs.python.org/issue4482 created DinoV Error to build _dbm module during make 12/01/08 http://bugs.python.org/issue4483 created legerf patch, easy struct: per item endianess specification 12/02/08 http://bugs.python.org/issue4484 created da4an1qu1 fast swap of "default" Windows python versions 12/02/08 http://bugs.python.org/issue4485 created v+python Exception traceback is incorrect for strange exception handling 12/02/08 http://bugs.python.org/issue4486 created ncoghlan Add utf8 alias for email charsets 12/02/08 http://bugs.python.org/issue4487 created maxua patch Python Documentation not Newb Friendly 12/02/08 http://bugs.python.org/issue4488 created mez shutil.rmtree is vulnerable to a symlink attack 12/02/08 http://bugs.python.org/issue4489 created mrts xml/sax/expatreader.py raises AttributeError when run 12/02/08 http://bugs.python.org/issue4490 created exarkun email.Header.decode_header() doesn't work if encoded-word was se 12/02/08 http://bugs.python.org/issue4491 created ishimoto patch httplib code thinks it closes connection, but does not 12/02/08 http://bugs.python.org/issue4492 created jjlee urllib2 doesn't always supply / where URI path component is empt 12/02/08 http://bugs.python.org/issue4493 created jjlee Python 2.6 fails to build with Py_NO_ENABLE_SHARED 12/02/08 http://bugs.python.org/issue4494 created snaury patch Fix signed/unsigned warning 12/02/08 CLOSED http://bugs.python.org/issue4495 created rhettinger misleading comment in urllib2 12/02/08 http://bugs.python.org/issue4496 created jjlee Compiler warnings in longobject.c 12/02/08 http://bugs.python.org/issue4497 created rhettinger patch Compiler warning "signed/unsigned comparion in mmapmodule" 12/02/08 http://bugs.python.org/issue4498 created rhettinger redefinition of TILDE macro on AIX platform 12/02/08 http://bugs.python.org/issue4499 created apaprocki Compiler warnings when compiling Python 3.0 with a C89 compiler 12/03/08 http://bugs.python.org/issue4500 created christian.heimes asyncore's urgent data management and connection closed events 12/03/08 http://bugs.python.org/issue4501 created giampaolo.rodola patch Allowing get_pre_input_hook from Readline 12/03/08 http://bugs.python.org/issue4502 created Conrad.Irwin patch exception traceback sometimes slow 12/03/08 http://bugs.python.org/issue4503 created ocean-city Doc/includes out of date 12/03/08 CLOSED http://bugs.python.org/issue4504 created exe ob_size not removed from docs 12/03/08 CLOSED http://bugs.python.org/issue4505 created exe 3.0 make test failures on Solaris 10 12/03/08 http://bugs.python.org/issue4506 created skip.montanaro 64bit 3.0 test failure on Mac OS X 10.5.5 12/03/08 http://bugs.python.org/issue4507 created skip.montanaro distutils compiler not handling spaces in path to output/src fil 12/03/08 http://bugs.python.org/issue4508 created Thorney patch possible memoryview bug 12/03/08 http://bugs.python.org/issue4509 created gumpy ValueError for list.remove() not very helpful 12/03/08 http://bugs.python.org/issue4510 created brett.cannon easy Decorators should have an index entry 12/04/08 CLOSED http://bugs.python.org/issue4511 created dvusboy Add get_filename method to zipimport 12/04/08 http://bugs.python.org/issue4512 created belopolsky patch Finish updating zip docstring 12/04/08 CLOSED http://bugs.python.org/issue4513 created tjreedy test_binascii is failing 12/04/08 CLOSED http://bugs.python.org/issue4514 created rhettinger Formatting error in "What's New in Python 3.0" 12/04/08 CLOSED http://bugs.python.org/issue4515 created pwang Another formatting error in "What's New in Python 3.0" 12/04/08 CLOSED http://bugs.python.org/issue4516 created pwang improve __getattribute__ documentation 12/04/08 CLOSED http://bugs.python.org/issue4517 created LambertDW broken link to python 3 doc on main doc page 12/04/08 CLOSED http://bugs.python.org/issue4518 created cleary .pyc files included in 2.6 and 3.0 release tarballs 12/04/08 CLOSED http://bugs.python.org/issue4519 created doko Online 3.0 documentation says it's for 3.1a0 12/04/08 CLOSED http://bugs.python.org/issue4520 created paulmelis "What's New in Python 3.0" mentions "getcwdu" instead of "getcwd 12/04/08 CLOSED http://bugs.python.org/issue4521 created hagen patch Module wsgiref is not python3000 ready (unicode issues) 12/04/08 http://bugs.python.org/issue4522 created tordmor patch logging module __init__ uses has_key 12/04/08 http://bugs.python.org/issue4523 created bitdancer patch Build fails at running build_scripts 12/04/08 http://bugs.python.org/issue4524 created chaz6 patch, needs review metaclass fixer fails with AttributeError, causing 2to3 to exit 12/04/08 CLOSED http://bugs.python.org/issue4525 created exarkun Clarify documentation for binary literals 12/04/08 CLOSED http://bugs.python.org/issue4526 created nneonneo Obsolete 'string or unicode' in fractions doc 12/04/08 CLOSED http://bugs.python.org/issue4527 created tjreedy easy test_httpservers consistently fails on OS X 12/04/08 http://bugs.python.org/issue4528 created mwdiers parser module failure on valid try/except/finally blocks 12/04/08 CLOSED http://bugs.python.org/issue4529 created kaiw IDLE crashes with Japanese text on print command 12/04/08 CLOSED http://bugs.python.org/issue4530 created Vultaire Deprecation warnings in lib\compiler\ast.py 12/04/08 CLOSED http://bugs.python.org/issue4531 created edreamleo Fails to build on QNX 6.3.2 12/04/08 http://bugs.python.org/issue4532 created kraai 3.0 file.read dreadfully slow 12/04/08 http://bugs.python.org/issue4533 created tjreedy patch problem with str.join - should work with list input, error says 12/04/08 CLOSED http://bugs.python.org/issue4534 created lopgok Build / Test Py3K failed on Ubuntu 8.10 12/04/08 http://bugs.python.org/issue4535 created lbhudda SystemError if invalid arguments passed to range() and step=-1 12/04/08 http://bugs.python.org/issue4536 created laszlo patch, needs review webbrowser.UnixBrowser should use builtins.open 12/05/08 http://bugs.python.org/issue4537 reopened amaury.forgeotdarc ctypes could include data type limits 12/04/08 http://bugs.python.org/issue4538 created roysmith askdirectory() in tkinter.filedialog is broken 12/04/08 http://bugs.python.org/issue4539 created dogtato typo in a module describes utf-8 as uft-8 12/04/08 http://bugs.python.org/issue4540 created john.weldon patch, needs review Add str method for removing leading or trailing substrings 12/05/08 CLOSED http://bugs.python.org/issue4541 created zhirsch patch test_binascii fails on windows 12/05/08 CLOSED http://bugs.python.org/issue4542 created amaury.forgeotdarc patch, easy container constructors destroy argument 12/05/08 CLOSED http://bugs.python.org/issue4543 created kjwcode textwrap: __all__ atribute missing 'dedent' function 12/05/08 CLOSED http://bugs.python.org/issue4544 created wolfdown doctest seems to always fail on numpy.array2string 12/05/08 CLOSED http://bugs.python.org/issue4545 created ekorn Small thingy in "What's New in Python 3.0" 12/05/08 CLOSED http://bugs.python.org/issue4546 created paulmelis Long jumps with frame_setlineno 12/05/08 http://bugs.python.org/issue4547 created fboule patch, needs review OptionParser : Weird comportement in args processing 12/05/08 CLOSED http://bugs.python.org/issue4548 created ohervieu A defect in <The Python Tutorial>-<Python Scopes and Name Spaces 12/05/08 http://bugs.python.org/issue4549 created PyTiger Issues Now Closed (86) ______________________ urllib fail to read URL contents, urllib2 crash Python 433 days http://bugs.python.org/issue1205 jjlee httplib does not handle ssl end of file properly 431 days http://bugs.python.org/issue1223 georg.brandl patch popen spawned process may not write to stdout under windows 401 days http://bugs.python.org/issue1366 georg.brandl urllib2 302 POST 391 days http://bugs.python.org/issue1401 jjlee Victor Stinner's GMP patch for longs 328 days http://bugs.python.org/issue1814 haypo patch Update What's new in 3.0 262 days http://bugs.python.org/issue2306 gvanrossum Update the ACKS file 264 days http://bugs.python.org/issue2311 georg.brandl 'exceptions' import fixer 261 days http://bugs.python.org/issue2350 brett.cannon patch, needs review Backport buffer interface in Python 3.0 to Python 2.6 262 days http://bugs.python.org/issue2393 georg.brandl Python 2.6 refleak test issues 259 days http://bugs.python.org/issue2447 georg.brandl urllib2 can't handle http://www.wikispaces.com 254 days http://bugs.python.org/issue2464 jjlee patch operator.*slice() should be deprecated in 2.6 166 days http://bugs.python.org/issue3171 georg.brandl Multiprocessing docs are not 3.0-ready 156 days http://bugs.python.org/issue3256 georg.brandl patch multiprocessing: BaseManager.from_address documented but doesn't 113 days http://bugs.python.org/issue3518 jnoller listreverseiterator has a decreasing len() 98 days http://bugs.python.org/issue3689 rhettinger os.getenv silently discards env variables with non-UTF-8 values 65 days http://bugs.python.org/issue4006 Rhamphoryncus Minor errors in multiprocessing docs 58 days http://bugs.python.org/issue4012 jnoller distutils build_scripts and install_data commands need 2to3 supp 54 days http://bugs.python.org/issue4073 loewis patch Multiprocessing example 35 days http://bugs.python.org/issue4193 jnoller BSD support for multiprocessing.cpu_count 30 days http://bugs.python.org/issue4238 jnoller cycle created by profile.run 27 days http://bugs.python.org/issue4273 amaury.forgeotdarc Error in docs of urllib.request and urllib.parse 16 days http://bugs.python.org/issue4355 georg.brandl patch Add CRT version info in msvcrt module 11 days http://bugs.python.org/issue4365 loewis patch Add a warnings.showwarning replacement for logging 12 days http://bugs.python.org/issue4384 vsajip easy binascii b2a functions accept strings (unicode) as data 10 days http://bugs.python.org/issue4387 loewis patch, needs review Uninstaller Lacks an Icon 9 days http://bugs.python.org/issue4389 lemburg os.extsep status? doc or os bug? 11 days http://bugs.python.org/issue4401 georg.brandl Windows Installer Error 1722 when opting for compilation at inst 7 days http://bugs.python.org/issue4407 keldonin patch re.compile(regexp).groups not documented 11 days http://bugs.python.org/issue4408 georg.brandl Dangling asterisks in Python 3.0 subprocess docs 11 days http://bugs.python.org/issue4409 georg.brandl Docs for 'y' Py_BuildValue tag are wrong 10 days http://bugs.python.org/issue4427 georg.brandl patch, patch Improve os open flag options doc 9 days http://bugs.python.org/issue4441 georg.brandl 2to3 run changed multiprocessing.Queue() to multiprocessing.queu 0 days http://bugs.python.org/issue4450 benjamin.peterson Coding cookie crashes IDLE 0 days http://bugs.python.org/issue4454 tjreedy No Windows List in IDLE if several windows have the same title 0 days http://bugs.python.org/issue4455 amaury.forgeotdarc patch xmlrpc is broken 1 days http://bugs.python.org/issue4456 benjamin.peterson getopt.gnu_getopt() loses dash argument 6 days http://bugs.python.org/issue4458 georg.brandl The parameter of PyInt_AsSsize_t() is not checked to see if it i 0 days http://bugs.python.org/issue4460 marketdickinson result of PyList_GetItem() not validated 0 days http://bugs.python.org/issue4462 rhettinger Parameters and result of PyList_GetItem() are not validated 0 days http://bugs.python.org/issue4463 rhettinger PyList_GetItem() result and parameters not fully validated 0 days http://bugs.python.org/issue4464 rhettinger The result of set_copy() is not checked for NULL 0 days http://bugs.python.org/issue4465 rhettinger The return value of PyFile_FromFile is not checked for NULL 0 days http://bugs.python.org/issue4466 marketdickinson return value of PyUnicode_AsEncodedString() is not checked for N 0 days http://bugs.python.org/issue4467 marketdickinson Restore chapter enumeration in Python docs 5 days http://bugs.python.org/issue4468 georg.brandl shutil.copyfile documentation 4 days http://bugs.python.org/issue4478 georg.brandl True division is not smart -> proposing smart True division 0 days http://bugs.python.org/issue4479 nassrat Fix signed/unsigned warning 0 days http://bugs.python.org/issue4495 rhettinger Doc/includes out of date 2 days http://bugs.python.org/issue4504 georg.brandl ob_size not removed from docs 2 days http://bugs.python.org/issue4505 georg.brandl Decorators should have an index entry 2 days http://bugs.python.org/issue4511 dvusboy Finish updating zip docstring 1 days http://bugs.python.org/issue4513 georg.brandl test_binascii is failing 1 days http://bugs.python.org/issue4514 amaury.forgeotdarc Formatting error in "What's New in Python 3.0" 1 days http://bugs.python.org/issue4515 georg.brandl Another formatting error in "What's New in Python 3.0" 1 days http://bugs.python.org/issue4516 georg.brandl improve __getattribute__ documentation 1 days http://bugs.python.org/issue4517 georg.brandl broken link to python 3 doc on main doc page 1 days http://bugs.python.org/issue4518 georg.brandl .pyc files included in 2.6 and 3.0 release tarballs 1 days http://bugs.python.org/issue4519 barry Online 3.0 documentation says it's for 3.1a0 0 days http://bugs.python.org/issue4520 georg.brandl "What's New in Python 3.0" mentions "getcwdu" instead of "getcwd 0 days http://bugs.python.org/issue4521 georg.brandl patch metaclass fixer fails with AttributeError, causing 2to3 to exit 0 days http://bugs.python.org/issue4525 benjamin.peterson Clarify documentation for binary literals 0 days http://bugs.python.org/issue4526 georg.brandl Obsolete 'string or unicode' in fractions doc 0 days http://bugs.python.org/issue4527 georg.brandl easy parser module failure on valid try/except/finally blocks 1 days http://bugs.python.org/issue4529 georg.brandl IDLE crashes with Japanese text on print command 0 days http://bugs.python.org/issue4530 amaury.forgeotdarc Deprecation warnings in lib\compiler\ast.py 0 days http://bugs.python.org/issue4531 edreamleo problem with str.join - should work with list input, error says 0 days http://bugs.python.org/issue4534 amaury.forgeotdarc Add str method for removing leading or trailing substrings 0 days http://bugs.python.org/issue4541 rhettinger patch test_binascii fails on windows 0 days http://bugs.python.org/issue4542 amaury.forgeotdarc patch, easy container constructors destroy argument 0 days http://bugs.python.org/issue4543 rhettinger textwrap: __all__ atribute missing 'dedent' function 0 days http://bugs.python.org/issue4544 georg.brandl doctest seems to always fail on numpy.array2string 0 days http://bugs.python.org/issue4545 amaury.forgeotdarc Small thingy in "What's New in Python 3.0" 0 days http://bugs.python.org/issue4546 georg.brandl OptionParser : Weird comportement in args processing 0 days http://bugs.python.org/issue4548 georg.brandl registry functions don't handle null characters 2144 days http://bugs.python.org/issue672132 amaury.forgeotdarc SIGSEGV in _sre.c (IRIX 6.5.20) 1948 days http://bugs.python.org/issue783789 amaury.forgeotdarc pickletools support for multiple pickles in a string 1792 days http://bugs.python.org/issue873150 fdrake catch invalid chunk length in httplib read routine 1748 days http://bugs.python.org/issue900744 jjlee patch cgi.py does not correctly handle fields with ';' 1499 days http://bugs.python.org/issue1055234 fdrake patch attempting to use urllib2 on some URLs fails starting on 2.4 1385 days http://bugs.python.org/issue1123695 amaury.forgeotdarc httplib patch to make _read_chunked() more robust 1047 days http://bugs.python.org/issue1411097 jjlee patch pdb find_function does not find Class methods. 681 days http://bugs.python.org/issue1643369 georg.brandl Draft implementation for PEP 364 640 days http://bugs.python.org/issue1675334 barry patch 'exec' does not accept what 'open' returns 495 days http://bugs.python.org/issue1762972 georg.brandl urllib2 hangs with some documents. 479 days http://bugs.python.org/issue1772481 amaury.forgeotdarc glob doesn't return unicode with unicode parameter 473 days http://bugs.python.org/issue1777458 georg.brandl Top Issues Most Discussed (10) ______________________________ 17 Error to build _dbm module during make 4 days open http://bugs.python.org/issue4483 15 AssertionError in Doc/includes/mp_benchmarks.py 7 days open http://bugs.python.org/issue4449 10 3.0 make test failures on Solaris 10 2 days open http://bugs.python.org/issue4506 10 BaseHTTPRequestHandler depends on GC to close connections 87 days open http://bugs.python.org/issue3826 9 Update What's new in 3.0 262 days closed http://bugs.python.org/issue2306 8 POP3 missing support for starttls 5 days open http://bugs.python.org/issue4473 7 typo in a module describes utf-8 as uft-8 1 days open http://bugs.python.org/issue4540 7 3.0 file.read dreadfully slow 1 days open http://bugs.python.org/issue4533 7 bdist_msi and bdist_wininst are missing an uninstaller icon 4 days open http://bugs.python.org/issue4480 7 Speed up PyEval_EvalFrameEx when tracing is off. 5 days open http://bugs.python.org/issue4477

1 0

Python + Java Integration
by Chas Emerick Dec. 5, 2008

Dec. 5, 2008

This may seem like it's coming out of left field for a minute, but bear with me. There is no doubt that Ruby's success is a concern for anyone who sees it as diminishing Python's status. One of the reasons for Ruby's success is certainly the notion (originally advocated by Bruce Tate, if I'm not mistaken) that it is the "next Java" -- the language and environment that mainstream Java developers are, or will, look to as a natural next step. One thing that would help Python in this "debate" (or, perhaps simply put it in the running, at least as a "next Java" candidate) would be if Python had an easier migration path for Java developers that currently rely upon various third-party libraries. The wealth of third-party libraries available for Java has always been one of its great strengths. Ergo, if Python had an easy-to-use, recommended way to use those libraries within the Python environment, that would be a significant advantage to present to Java developers and those who would choose Ruby over Java. Platform compatibility is always a huge motivator for those looking to migrate or upgrade. In that vein, I would point to JPype (http://jpype.sourceforge.net). JPype is a module that gives "python programs full access to java class libraries". My suggestion would be to either: (a) include JPype in the standard library, or barring that, (b) make a very strong push to support JPype (a) might be difficult or cumbersome technically, as JPype does need to build against Java headers, which may or may not be possible given the way that Python is distributed, etc. However, (b) is very feasible. I can't really say what "supporting JPype" means exactly -- maybe GvR and/or other heavyweights in the Python community make public statements regarding its existence and functionality, maybe JPype gets a strong mention or placement on python.org....all those details are obviously not up to me, and I don't know the workings of the "official" Python organizations enough to make serious suggestions. Regardless of the form of support, I think raising people's awareness of JPype and what it adds to the Python environment would be a Good Thing (tm). For our part, we've used JPype to make PDFTextStream (our previously Java-only PDF text extraction library) available and supported for Python. You can read some about it here: http://snowtide.com/PDFTextStream.Python And I've blogged about how PDFTextStream.Python came about, and how we worked with Steve Ménard, the maintainer of JPype, to make it all happen (watch out for this URL wrapping): http://blog.snowtide.com/2006/08/21/working-together-pythonjava-open- sourcecommercial Cheers, Chas Emerick Founder, Snowtide Informatics Systems Enterprise-class PDF content extraction cemerick(a)snowtide.com http://snowtide.com | +1 413.519.6365

3 2

Python security: draft article on the wiki
by Victor Stinner Dec. 5, 2008

Dec. 5, 2008

Hi, I started to write a short article about Python security on the wiki: http://wiki.python.org/moin/Security Nothing useful yet. -- Victor Stinner aka haypo http://www.haypocalc.com/blog/

1 0

Fix for frame_setlineno() in frameobject.c function
by Fabien.Bouleau＠ses-engineering.com Dec. 5, 2008

Dec. 5, 2008

Hello, This concerns a known bug in the frame_setlineno() function for Python 2.5.x and 2.6.x (maybe in earlier version too). It is not possible to use this function when the address or line offset are greater than 127. The problem comes from the lnotab variable which is typed char*, therefore implicitely signed char*. Any value above 127 becomes a negative number. The fix is very simple (applied on the Python 2.6.1 version of the source code): --- frameobject.c Thu Oct 02 19:39:50 2008 +++ frameobject_fixed.c Fri Dec 05 11:27:42 2008 @@ -119,8 +119,8 @@ line = f->f_code->co_firstlineno; new_lasti = -1; for (offset = 0; offset < lnotab_len; offset += 2) { - addr += lnotab[offset]; - line += lnotab[offset+1]; + addr += ((unsigned char*)lnotab)[offset]; + line += ((unsigned char*)lnotab)[offset+1]; if (line >= new_lineno) { new_lasti = addr; new_lineno = line; It would be nice to fix it for Python 2.5 and above, in order to have a proper MSI installer for Windows. Best regards, Fabien Bouleau DISCLAIMER: This e-mail contains proprietary information some or all of which may be legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail. If you are not the intended recipient you must not use, disclose, distribute, copy, print, or rely on this e-mail.

2 1

Re: [Python-Dev] RELEASED Python 3.0 final FFT
by Lambert, David W (S&T) Dec. 5, 2008

Dec. 5, 2008

http://code.activestate.com/recipes/576550/ This recipe shows how to use gsl FFT with python 3. ctypes is really good!

1 0

Taint Mode in Python 3.0
by Nicole King Dec. 5, 2008

Dec. 5, 2008

Dear All, I have published the diff for my implementation of tainted mode in Python for R3.0 (released version) at http://www.cats-muvva.net/software/. Look at the bottom the page. I apologise for past problems accessing this web site: I hope to have resolved all the issues with it. Nicole

4 4

Re: [Python-Dev] RELEASED Python 3.0 final
by Barry Warsaw Dec. 5, 2008

Dec. 5, 2008

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Dec 3, 2008, at 9:13 PM, Dotan Cohen wrote: > On this page: > http://www.python.org/download/releases/3.0/ > > The text "This is a proeuction release" should probably read "This is > a production release". It would give a better first impression :) Fixed, thanks! - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) iQCVAwUBSTc/WHEjvBPtnXfVAQL8TwP+M2Ryv7WY36ICEvzGU4EzlRG/gI4MolQe cD8DJUJfQuR6INTot/t7vTcL8oDHq7q9OHbfvd3jmSwH/ZytsMz2OvJUYlKDQjwG BcQRpioprcesoU6cufSmKAUiUP+L0RTAMmT0WDbbeCzzMZRq3Humd4Zs43nL26NT uFb83Dk6yWA= =qPjn -----END PGP SIGNATURE-----

7 8

RELEASED Python 2.6.1
by Barry Warsaw Dec. 5, 2008

Dec. 5, 2008

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hot on the heals of Python 3.0 comes the Python 2.6.1 bug-fix release. This is the latest production-ready version in the Python 2.6 family. Dozens of issues have fixed since Python 2.6 final was released in October. Please see the NEWS file for details: http://www.python.org/download/releases/2.6.1/NEWS.txt For more information on Python 2.6 please see http://docs.python.org/dev/whatsnew/2.6.html Source tarballs and Windows installers can be downloaded from the Python 2.6.1 page: http://www.python.org/download/releases/2.6.1/ Bugs can be reported in the Python bug tracker: http://bugs.python.org Enjoy, - -Barry Barry Warsaw barry(a)python.org Python 2.6/3.0 Release Manager (on behalf of the entire python-dev team) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) iQCVAwUBSTi3KnEjvBPtnXfVAQLhQAP7BR8eqlVLDlu/bp2tGaRRQS8GW5X8KQQk h0RwCcAKK19WH6YS6zH+VoIpD8LnD37YqZL3m5MQZ/rDf0o3e6152CZ6GJvWE+0i 6w0cSvDqdWuOpfUfpYR21eQnoFuC6x/yfI//yWCnu8bZCypjmJCLKZAvu4pMjYgD ceChg4lLE68= =u/iW -----END PGP SIGNATURE-----

1 0

Merging mailing lists
by "Martin v. Löwis" Dec. 5, 2008

Dec. 5, 2008

I would like to merge mailing lists, now that the design and first implementation of Python 3000 is complete. In particular, I would like to merge the python-3000 mailing list back into python-dev, and the python-3000-checkins mailing list back into python-checkins. The rationale is to simplify usage of the lists, and to avoid cross-postings. To implement this, all subscribers of the 3000 mailing lists would be added to the trunk mailing lists (avoiding duplicates, of course), and all automated messages going to python-3000-checkins would then be directed to the trunk lists. The 3000 mailing lists would change into read-only mode (i.e. primarily leaving the archives behind). Any objections? Regards, Martin

8 7