delta/cpython-git.git/Python/sysmodule.c, branch 3.7

[3.7] Correct CVE-2020-10735 documentation (GH-100306). (GH-100699)

2023-01-09T02:17:13+00:00

Co-authored-by: Jeremy Paige .
(cherry picked from commit 88fe8d701af3316c8869ea18ea1c7acec6f68c04)

Co-authored-by: Gregory P. Smith

[3.7] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (GH-96504)

2022-09-06T05:24:36+00:00

Converting between `int` and `str` in bases other than 2
(binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now
raises a `ValueError` if the number of digits in string form is above a
limit to avoid potential denial of service attacks due to the algorithmic
complexity. This is a mitigation for CVE-2020-10735
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735).

This new limit can be configured or disabled by environment variable, command
line flag, or :mod:`sys` APIs. See the `Integer String Conversion Length
Limitation` documentation.  The default limit is 4300
digits in string form.

Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback
from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson.

bpo-38096: Clean up the "struct sequence" / "named tuple" docs (GH-15895) (GH-15962)

2019-09-12T02:50:51+00:00

bpo-37369: Fixes path for sys.executable when running from the Microsoft Store (GH-14450)

2019-06-28T17:02:13+00:00

bpo-36370: Check for PyErr_Occurred() after PyImport_GetModule() (GH-12504)

2019-03-25T21:36:43+00:00

bpo-36236: Handle removed cwd at Python init (GH-12450)

2019-03-19T23:30:45+00:00

At Python initialization, the current directory is no longer
prepended to sys.path if it has been removed.

bpo-35742: Fix test_envar_unimportable in test_builtin. (GH-11561)

2019-01-15T11:45:57+00:00

Handle the case of an empty module name in PYTHONBREAKPOINT.

Fixes a regression introduced in bpo-34756.
(cherry picked from commit 3607ef43c4a1a24d44f39ff54a77fc0af5bfa09a)

Co-authored-by: Serhiy Storchaka

bpo-34756: Silence only ImportError and AttributeError in sys.breakpointhook(). (GH-9457)

2019-01-14T11:17:06+00:00

(cherry picked from commit 6fe9c446f8302553952f63fc6d96be4dfa48ceba)

Co-authored-by: Serhiy Storchaka

bpo-35452: Make PySys_HasWarnOptions() never raising an exception. (GH-11075)

2018-12-10T12:37:09+00:00

(cherry picked from commit dffccc6b594951fc798973e521da205785823f0f)

Co-authored-by: Serhiy Storchaka

bpo-35451: Fix reference counting for sys.warnoptions and sys._xoptions. (GH-11063)

2018-12-10T10:26:36+00:00

(cherry picked from commit 72ff7b4c000f7b8199231a0eb1ca4b119fab40a5)

Co-authored-by: Serhiy Storchaka