homepage

This issue tracker has been migrated to GitHub , and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author alexkon
Recipients alexkon, docs@python
Date 2012年09月04日.22:44:18
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1346798659.62.0.336544157965.issue15863@psf.upfronthosting.co.za>
In-reply-to
Content
Some security fixes and bug fixes that are simultaneously issued for multiple Python versions require changes to the documentation. I'm now looking at the hash randomization vulnerability that was fixed in 2.6.8 and 2.7.3.
The docs always mention the release in which a new feature was added. That's great. But for a security fix such as the bug in question, the set of versions which support it doesn't look like "2.x.y or later". 
The documentation for the -R command-line option and the PYTHONHASHSEED environment variable says "New in version 2.6.8". A reader who is not familiar with the context would infer that those feature are supported in Python 2.7 through 2.7.2, which is not the case. The docs should say "New in version 2.6.8 and 2.7.3".
http://docs.python.org/using/cmdline.html#cmdoption-R
http://docs.python.org/using/cmdline.html#envvar-PYTHONHASHSEED
The documentation for the sys.flags.hash_randomization attribute says "New in version 2.7.3". Again, that leaves out the version 2.6.8 and future versions in the 2.6.x branch, which presumably support the new attribute. The docs should say "New in version 2.6.8 and 2.7.3".
http://docs.python.org/library/sys.html#sys.flags
Disclaimer: I did not test the relevant micro releases to see whether they actually support those features. Just checked the release dates and applied common sense.
If you know of any other micro release bugfixes that were mentioned in the docs, the same considerations apply to them. Please verify the docs are correct, fix them or file appropriate bugs.
History
Date User Action Args
2012年09月04日 22:44:19alexkonsetrecipients: + alexkon, docs@python
2012年09月04日 22:44:19alexkonsetmessageid: <1346798659.62.0.336544157965.issue15863@psf.upfronthosting.co.za>
2012年09月04日 22:44:19alexkonlinkissue15863 messages
2012年09月04日 22:44:18alexkoncreate

AltStyle によって変換されたページ (->オリジナル) /