delta/cpython-git.git/Modules, branch v3.7.13 github.com: python/cpython.git bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) (GH-31741) 2022-03-07T23:11:09+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2022-03-07T23:11:09+00:00 f656bc1cdbdfaaa07f66ed97e011b258b97e2788 (cherry picked from commit 176835c3d5c70f4c1b152cc2062b549144e37094) Co-authored-by: Steve Dower <steve.dower@python.org> 
(cherry picked from commit 176835c3d5c70f4c1b152cc2062b549144e37094)

Co-authored-by: Steve Dower <steve.dower@python.org>
 bpo-46794: Bump up the libexpat version into 2.4.6 (GH-31487) (GH-31521) 2022-02-23T21:51:08+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2022-02-23T21:51:08+00:00 15d7594d9974cfef10e65cbb01161168c42abe9d (cherry picked from commit 1935e1cc284942bec8006287c939e295e1a7bf13) Co-authored-by: Dong-hee Na <donghee.na@python.org> 
(cherry picked from commit 1935e1cc284942bec8006287c939e295e1a7bf13)

Co-authored-by: Dong-hee Na <donghee.na@python.org>
bpo-46784: Add newly exported expat symbols to the namespace. (GH-31397) (GH-31418) 2022-02-21T19:18:26+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2022-02-21T19:18:26+00:00 61f3c308e435c5294e674ef59fed1d51f47e0089 The libexpat 2.4.1 upgrade from introduced the following new exported symbols: * `testingAccountingGetCountBytesDirect` * `testingAccountingGetCountBytesIndirect` * `unsignedCharToPrintable` * `XML_SetBillionLaughsAttackProtectionActivationThreshold` * `XML_SetBillionLaughsAttackProtectionMaximumAmplification` We need to adjust [Modules/expat/pyexpatns.h](https://github.com/python/cpython/blob/master/Modules/expat/pyexpatns.h) (The newer libexpat upgrade has no new symbols). Automerge-Triggered-By: GH:gpshead (cherry picked from commit 6312c1052c0186b4596fc45c42fd3ade9f8f5911) Co-authored-by: Yilei "Dolee" Yang <yileiyang@google.com> 
The libexpat 2.4.1 upgrade from  introduced the following new exported symbols:

* `testingAccountingGetCountBytesDirect`
* `testingAccountingGetCountBytesIndirect`
* `unsignedCharToPrintable`
* `XML_SetBillionLaughsAttackProtectionActivationThreshold`
* `XML_SetBillionLaughsAttackProtectionMaximumAmplification`

We need to adjust [Modules/expat/pyexpatns.h](https://github.com/python/cpython/blob/master/Modules/expat/pyexpatns.h)

(The newer libexpat upgrade  has no new symbols).

Automerge-Triggered-By: GH:gpshead
(cherry picked from commit 6312c1052c0186b4596fc45c42fd3ade9f8f5911)

Co-authored-by: Yilei "Dolee" Yang <yileiyang@google.com>
 bpo-46400: Update libexpat from 2.4.1 to 2.4.4 (GH-31022) (GH-31298) 2022-02-21T18:45:55+00:00 Dong-hee Na donghee.na@python.org 2022-02-21T18:45:55+00:00 5fdacac8cecb123ae12669ceb3504b2f41075c20 Co-authored-by: Cyril Jouve <jv.cyril@gmail.com> 
Co-authored-by: Cyril Jouve <jv.cyril@gmail.com>
 [3.7] bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28042) 2021-08-31T05:11:53+00:00 Łukasz Langa lukasz@langa.pl 2021-08-31T05:11:53+00:00 79101b890ee021a901a8b6837a3a320d57adb725 Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy is most used on Windows and macOS. Co-authored-by: Victor Stinner <vstinner@python.org> Co-authored-by: Łukasz Langa <lukasz@langa.pl>. (cherry picked from commit 3fc5d84046ddbd66abac5b598956ea34605a4e5d) 
Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the
fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy
is most used on Windows and macOS.

Co-authored-by: Victor Stinner <vstinner@python.org>

Co-authored-by: Łukasz Langa <lukasz@langa.pl>.
(cherry picked from commit 3fc5d84046ddbd66abac5b598956ea34605a4e5d)
[3.7] closes bpo-42938: Replace snprintf with Python unicode formatting in ctypes param reprs. (GH-24249) 2021-01-18T21:24:02+00:00 Benjamin Peterson benjamin@python.org 2021-01-18T21:24:02+00:00 d9b8f138b7df3b455b54653ca59f491b4840d6fa (cherry picked from commit 916610ef90a0d0761f08747f7b0905541f0977c7) Co-authored-by: Benjamin Peterson <benjamin@python.org> 
(cherry picked from commit 916610ef90a0d0761f08747f7b0905541f0977c7)

Co-authored-by: Benjamin Peterson <benjamin@python.org>
 bpo-40791: Make compare_digest more constant-time. (GH-23438) 2020-11-22T17:33:09+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2020-11-22T17:33:09+00:00 db95802bdfac4d13db3e2a391ec7b9e2f8d92dbe The existing volatile `left`/`right` pointers guarantee that the reads will all occur, but does not guarantee that they will be _used_. So a compiler can still short-circuit the loop, saving e.g. the overhead of doing the xors and especially the overhead of the data dependency between `result` and the reads. That would change performance depending on where the first unequal byte occurs. This change removes that optimization. (This is change GH-1 from https://bugs.python.org/issue40791 .) (cherry picked from commit 31729366e2bc09632e78f3896dbce0ae64914f28) Co-authored-by: Devin Jeanpierre <jeanpierreda@google.com> 
The existing volatile `left`/`right` pointers guarantee that the reads will all occur, but does not guarantee that they will be _used_. So a compiler can still short-circuit the loop, saving e.g. the overhead of doing the xors and especially the overhead of the data dependency between `result` and the reads. That would change performance depending on where the first unequal byte occurs. This change removes that optimization.

(This is change GH-1 from https://bugs.python.org/issue40791 .)
(cherry picked from commit 31729366e2bc09632e78f3896dbce0ae64914f28)

Co-authored-by: Devin Jeanpierre <jeanpierreda@google.com>
 bpo-41100: additional fixes for testing on macOS 11 Big Sur Intel 2020-08-15T05:08:56+00:00 Ned Deily nad@python.org 2020-08-15T03:48:14+00:00 a0ad82959652ff64c99231f457fd740b17330514 Note: macOS 11 is not yet released, this release of Python is not fully supported on 11.0, and not all tests pass. 
Note: macOS 11 is not yet released, this release of Python is not
fully supported on 11.0, and not all tests pass.
bpo-41288: Fix a crash in unpickling invalid NEWOBJ_EX. (GH-21458) (GH-21461) 2020-07-13T18:17:01+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2020-07-13T18:17:01+00:00 620e276a8c1d53332fbf08d369be87f862b6949d Automerge-Triggered-By: @tiran (cherry picked from commit 4f309abf55f0e6f8950ac13d6ec83c22b8d47bf8) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> 
Automerge-Triggered-By: @tiran
(cherry picked from commit 4f309abf55f0e6f8950ac13d6ec83c22b8d47bf8)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
 closes bpo-41235: Fix the error handling in SSLContext.load_dh_params() (GH-21389) 2020-07-08T04:55:36+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2020-07-08T04:55:36+00:00 c8c818b0d73680516d5841597b705a1feeb42113 (cherry picked from commit aebc0495572c5bb85d2bd97d27cf93ab038b5a6a) Co-authored-by: Zackery Spytz <zspytz@gmail.com> 
(cherry picked from commit aebc0495572c5bb85d2bd97d27cf93ab038b5a6a)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>