delta/cpython-git.git, branch v3.9.15

Python 3.9.15

2022-10-11T14:48:37+00:00

[3.9] gh-91708: Revert params note in urllib.parse.urlparse table (GH-96699) (#98054)

2022-10-07T20:53:39+00:00

Revert params note in urllib.parse.urlparse table
(cherry picked from commit eed80458e8e776d15fa862da71dcce58c47e2ca7)

Co-authored-by: Stanley <46876382+slateny@users.noreply.github.com>

[3.9] gh-94208: Add even more TLS version/protocol checks for FreeBSD (#98037)

2022-10-07T18:49:28+00:00

Otherwise, buildbot builds would fail since there's no TLS 1.0/1.1 support.

[3.9] gh-97897: Prevent os.mkfifo and os.mknod segfaults with macOS 13 SDK (GH-97944) (#97968)

2022-10-06T19:14:32+00:00

The macOS 13 SDK includes support for the `mkfifoat` and `mknodat` system calls.
 Using the `dir_fd` option with either `os.mkfifo` or `os.mknod` could result in a
 segfault if cpython is built with the macOS 13 SDK but run on an earlier
 version of macOS. Prevent this by adding runtime support for detection of
 these system calls ("weaklinking") as is done for other newer syscalls on
 macOS.
(cherry picked from commit 6d0a0191a4e5477bd843e62c24d7f3bcad4fd5fc)

Co-authored-by: Ned Deily

[3.9] gh-96848: Fix -X int_max_str_digits option parsing (GH-96988) (GH-97574)

2022-10-04T18:57:34+00:00

gh-96848: Fix -X int_max_str_digits option parsing (GH-96988)

Fix command line parsing: reject "-X int_max_str_digits" option with
no value (invalid) when the PYTHONINTMAXSTRDIGITS environment
variable is set to a valid limit.
(cherry picked from commit 41351662bcd21672d8ccfa62fe44d72027e6bcf8)

Co-authored-by: Victor Stinner

[3.9] gh-96577: Fixes buffer overrun in _msi module (GH-96633) (GH-96657)

2022-10-04T17:06:17+00:00

gh-96577: Fixes buffer overrun in _msi module (GH-96633)
(cherry picked from commit 4114bcc9ef7595a07196bcecf9c7d6d39f57f64d)

Co-authored-by: Steve Dower

[3.9] gh-95778: Mention sys.set_int_max_str_digits() in error message (#96874) (#96877)

2022-10-04T17:05:45+00:00

When ValueError is raised if an integer is larger than the limit,
mention sys.set_int_max_str_digits() in the error message.

(cherry picked from commit e841ffc915e82e5ea6e3b473205417d63494808d)

Co-authored-by: Ned Deily

[3.9] gh-97005: Update libexpat from 2.4.7 to 2.4.9 (gh-97006) (gh-97012)

2022-10-04T17:04:33+00:00

gh-97005: Update libexpat from 2.4.7 to 2.4.9 (gh-97006)

Co-authored-by: Gregory P. Smith [Google] 
(cherry picked from commit 10e3d398c31cc1695752fc52bc6ca2ce9ef6237e)

Co-authored-by: Dong-hee Na 
Co-authored-by: Ned Deily

[3.9] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97627)

2022-10-04T17:01:10+00:00

gh-97616: list_resize() checks for integer overflow (GH-97617)

Fix multiplying a list by an integer (list *= int): detect the
integer overflow when the new allocated length is close to the
maximum size.  Issue reported by Jordan Limor.

list_resize() now checks for integer overflow before multiplying the
new allocated length by the list item size (sizeof(PyObject*)).
(cherry picked from commit a5f092f3c469b674b8d9ccbd4e4377230c9ac7cf)

Co-authored-by: Victor Stinner

[3.9] gh-97612: Fix shell injection in get-remote-certificate.py (GH-97613) (GH-97632)

2022-10-04T17:00:16+00:00

gh-97612: Fix shell injection in get-remote-certificate.py (GH-97613)

Fix a shell code injection vulnerability in the
get-remote-certificate.py example script. The script no longer uses a
shell to run "openssl" commands. Issue reported and initial fix by
Caleb Shortt.

Remove the Windows code path to send "quit" on stdin to the "openssl
s_client" command: use DEVNULL on all platforms instead.

Co-authored-by: Caleb Shortt 
(cherry picked from commit 83a0f44ffd8b398673ae56c310cf5768d359c341)

Co-authored-by: Victor Stinner