_io.IncrementalNewlineDecoder's initializer possibly assigns out-of-range
value to the bitwise struct field.
(cherry picked from commit b08746bf)
Co-authored-by: Xiang Zhang <angwerzx@126.com>

Adding `max_num_fields` to `cgi.FieldStorage` to make DOS attacks harder by
limiting the number of `MiniFieldStorage` objects created by `FieldStorage`.

(cherry picked from commit 20914483)

(cherry picked from commit 53835e92)

(cherry picked from commit c0799ec9)
Co-authored-by: Gus Goulart <augusto@goulart.me>

(cherry picked from commit 18d57b4d)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

Based on the investigation by Xiang Zhang.
(cherry picked from commit df13df41)

Referring to ``pytest`` as ``py.test`` is deprecated..
(cherry picked from commit d855f2fd)
Co-authored-by: Andreas Pelme <andreas@pelme.se>

Specify that blocks are non-overlapping. Change '!=' to '<'.
(cherry picked from commit d9bff4e8)
Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

Prior to this revision, after the shutdown of a `BaseServer`,
the server accepted a last single request
if it was sent between the server socket polling
and the polling timeout.

This can be problematic for instance for a server restart
for which you do not want to interrupt the service,
by not closing the listening socket during the restart.
One request failed because of this behavior.

Note that only one request failed,
following requests were not accepted, as expected.

(cherry picked from commit 10cb3760)

(cherry picked from commit 1487b651caa62647f8f8c9e8432e475e3566130c)
Co-authored-by: Andrés Delfino <adelfino@gmail.com>

* bpo-34576 - Fix the formatting for security considerations in http.server.rst (#10005)

* Address review comment..
(cherry picked from commit eeab510b)
Co-authored-by: Senthil Kumaran <skumaran@gatech.edu>

Don't leak a reference if PyDict_Update() fails, check the
PyList_New() call in treebuilder_new(), and properly handle failures
in xmlparser().

(cherry picked from commit 9f3ed3e2)

Fix the documentation of copy2, as it does not copy file ownership (user and
group), only mode, mtime, atime and flags.

The original text was confusing to developers as it suggested that this
command is the same as 'cp -p', but according to cp(1), '-p' copies file
ownership as well.

Clarify which metadata is copied by shutil.copystat in its docstring.

(cherry picked from commit 4f399be0)

This reverts commit 7829bba4.

(cherry picked from commit 83a07652)

Co-authored-by: Andrei Petre p31andrei@gmail.com

(cherry picked from commit 1deea5e5).
(cherry picked from commit bd9c2ce7acaef45f23c2659b854fc9925096d040)
Co-authored-by: Juliette Monsel <j4321@users.noreply.github.com>

[2.7] bpo-31500: Add idlelib news items about HiDPI scaling

(cherry picked from commit a96c96f5)

https://bugs.python.org/issue35032
(cherry picked from commit d262250d)
Co-authored-by: Stéphane Wirtel <stephane@wirtel.be>

Add restriction on the offset parameter for mmap.flush.

Explain that ALLOCATIONGRANULARITY is the same as PAGESIZE in Unix.
(cherry picked from commit 027664a3)
Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

Initial patch by Chandan Kumar.
(cherry picked from commit 13ae4d44)
Co-authored-by: Berker Peksag <berker.peksag@gmail.com>

The xml.sax and xml.dom.domreg modules now obey
sys.flags.ignore_environment.
Signed-off-by: Christian Heimes <christian@python.org>

https://bugs.python.org/issue34791
(cherry picked from commit 223e501f)
Co-authored-by: Christian Heimes <christian@python.org>

(cherry picked from commit 68def052)
Co-authored-by: Zackery Spytz <zspytz@gmail.com>

Verify the value for the parameter '-s' of the cProfile CLI. Patch by Robert
Kuska.
Co-authored-by: Robert Kuska <rkuska@gmail.com>
(cherry picked from commit fcd5e84a)





https://bugs.python.org/issue23420

(cherry picked from commit e385d066)
Co-authored-by: Stéphane Wirtel <stephane@wirtel.be>

(cherry picked from commit d4d60134)

python-gdb.py now handles errors on computing the line number
of a Python frame.

Changes:

* PyFrameObjectPtr.current_line_num() now catchs any Exception on
  calling addr2line(), instead of failing with a surprising "<class
  'TypeError'> 'FakeRepr' object is not subscriptable" error.
* All callers of current_line_num() now handle current_line_num()
  returning None.
* PyFrameObjectPtr.current_line() now also catchs IndexError on
  getting a line from the Python source file.

(cherry picked from commit 2e438cc2)

The bytearray constructor converted unexpected exceptions
(e.g. MemoryError and KeyboardInterrupt) to TypeError.
(cherry picked from commit e890421e)

Covered all special cases: bytes, tuple, list, differend
kinds of iterables and iterators.
(cherry picked from commit 1a997eb2)

Frame's field f_tstate is NULL when the generator is exhausted.

(cherry picked from commit 4505f65a)
Co-authored-by: Gus Goulart <augusto@goulart.me>

When Python is built with the intel control-flow protection flags,
-mcet -fcf-protection, gdb is not able to read the stack without
actually jumping inside the function. This means an extra
'next' command is required to make the $pc (program counter)
enter the function and make the stack of the function exposed to gdb.

test_gdb: get_gdb_repr() now uses the "backtrace 1" command after
breakpoint, as in the master branch.
Co-Authored-By: Marcel Plch <gmarcel.plch@gmail.com>

(cherry picked from commit 9b7c74ca)
(cherry picked from commit 79d21331)

Fix a reference issue inside multiprocessing.Pool that caused the pool to remain alive if it was deleted without being closed or terminated explicitly.

* bpo-13407: Mention that tarfile doesn't support multistream bzip2 files

* Add mention to bz2 module also

Fix the following warning:

Python/pystrtod.c: In function 'format_float_short':
Python/pystrtod.c:1007:13: warning: 'strncpy' output truncated before terminating nul copying 3 bytes from a string of the same length [-Wstringop-truncation]
             strncpy(p, "ERR", 3);

(cherry picked from commit 9fb84157)

(cherry picked from commit e0e5065d)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

This makes streamed zips compatible with MacOS Archive Utility and
other applications.
(cherry picked from commit 4ba3b50b)
Co-authored-by: Silas Sewell <silas@sewell.org>

Also make docs for NEWFALSE and NEWTRUE more consistent
with docs for other opcodes.
(cherry picked from commit 488cfb78)
Co-authored-by: Krzysztof Wroblewski <krzysiek.wr@gmail.com>