hawking's weblog

I've done some major work under dev-lang/python today. I've backported many patches from upstream. Here is a list of issues fixed:

• Buffer overflow in zlib extension, CVE-2008-1721.
  Gentoo bug: 217221
  Upstream bug: 2586
  Upstream fix: r62235
  Fixed Gentoo/Python versions: 2.3.6-r5, 2.4.4-r10, 2.5.2-r1
• PyString_FromStringAndSize() unsafe
  Upstream bug: 2587
  Upstream fix: r62262
  Fixed Gentoo/Python versions: 2.3.6-r5, 2.4.4-r10, 2.5.2-r1
• distutils doesn't respect CXXFLAGS
  Gentoo bug: 145206
  Fixed Gentoo/Python versions: 2.4.4-r10, 2.5.2-r1
  Thanks to Mark Peloquin for the patch.
• Thread unsafe file objects
  Upstream bugs: 595601, 815646
  Upstream fix: r62195
  Fixed Gentoo/Python versions: 2.5.2-r1
• a bunch of infinite C recursions
  Upstream bug: 1202533
  Upstream fix: r58032
  Fixed Gentoo/Python versions: 2.5.2-r1

I've also added wininst USE flag fixing bug 198021 and converted nothreads and nocxx USE flags to threads and cxx adding USE defaults. The only issue left is internal build of libffi - bug 209673 - which should wait until some issues about libffi is clarified.

If you're using a python extension written in C++ like wxpython, reemerge it to make use of your CXXFLAGS.

This is all for now. Have a nice weekend :-)