Reported by Svace static analyzer.
(cherry picked from commit 6f82bffd)
Co-authored-by: Alexey Izbyshev <izbyshev@ispras.ru>

It was backported in 0cc43df0.

(cherry picked from commit b9bf9d02)
Co-authored-by: Benjamin Peterson <benjamin@python.org>

https://bugs.python.org/issue34405

(cherry picked from commit 31912b43c903aafad09350899ed6a9dec7c43421)
Co-authored-by: Ned Deily <nad@python.org>

<!-- issue-number: [bpo-34405](https://www.bugs.python.org/issue34405) -->
https://bugs.python.org/issue34405
<!-- /issue-number -->

(cherry picked from commit 6b273f7f)
Co-authored-by: Bo Bayles <bbayles@gmail.com>

[2.7] closes bpo-31608: Fix a crash in methods of a subclass of _collections.deque with a bad __new__(). (GH-9179)

(cherry picked from commit 5033aa77)
Co-authored-by: Benjamin Peterson <benjamin@python.org>

Python 2 never checked for I/O error when reading .py files and
thus could mistake an I/O error for EOF and create incorrect .pyc
files.
This adds an check for this and aborts on an error.

Many type object initializations labeled a field "tp_size" in the
comment, but the name of that field is tp_basicsize..
(cherry picked from commit 0e0bc4e2)
Co-authored-by: Peter Eisentraut <peter@eisentraut.org>

(cherry picked from commit 4e519377)
Co-authored-by: Zackery Spytz <zspytz@gmail.com>

When calling tp_descr_get(self, obj, type), make sure that
we own a strong reference to "self".

(cherry picked from commit 8f735485)

(cherry picked from commit 7d81e8f5)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

distutils.spawn.find_executable() now falls back on os.defpath if the
PATH environment variable is not set.

(cherry picked from commit 39487196)

The change to Tools/scripts/diff.py effectively backports part of
a2637729.
The test code changed in Doc/library/difflib.rst is not present in current 3.x.

... by removing a superfluous "either".

Reported by Никита Люшненко on docs@

(cherry picked from commit 98b976a2)

Sometimes some versions of the shared libraries that are part of the
traceback are compiled in optimised mode and the Program Counter (PC)
is not present, not allowing gdb to walk the frames back. When this
happens, the Python bindings of gdb raise an exception, making the
test impossible to succeed.
(cherry picked from commit f2ef51f8)
Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

closes bpo-34540: Convert shutil._call_external_zip to use subprocess rather than distutils.spawn. (GH-8985)

(cherry picked from commit 91cb298f)
Co-authored-by: Vladimir Matveev <v2matveev@outlook.com>

(cherry picked from commit 704e2d37)
Co-authored-by: Christian Heimes <christian@cheimes.de>

Reported by Svace static analyzer.
(cherry picked from commit 2b824b25)
Co-authored-by: Alexey Izbyshev <izbyshev@ispras.ru>

Reported by Svace static analyzer.
(cherry picked from commit f6247aac)
Co-authored-by: Alexey Izbyshev <izbyshev@ispras.ru>

(cherry picked from commit c33bb5d4)
Co-authored-by: Ville Skyttä <ville.skytta@iki.fi>

[2.7] bpo-34457: Python/ast.c: Add missing NULL check to alias_for_import_name(). (GH-8852) (GH-8858)

Reported by Svace static analyzer.
(cherry picked from commit 28853a24)
Co-authored-by: Alexey Izbyshev <izbyshev@ispras.ru>

(cherry picked from commit 3e26e42c)
Co-authored-by: Zackery Spytz <zspytz@gmail.com>

[2.7] bpo-30411: Use --git-dir instead of -C to make git work under version below 1.8.5. (GH-8744) (GH-8838)

(cherry picked from commit 4c855577)

Read from data socket to avoid "[SSL] shutdown while in init" exception
during shutdown of the dummy server.
Signed-off-by: Christian Heimes <christian@python.org>

<!-- issue-number: [bpo-34391](https://www.bugs.python.org/issue34391) -->
https://bugs.python.org/issue34391
<!-- /issue-number -->.
(cherry picked from commit 1590c393)
Co-authored-by: Christian Heimes <christian@python.org>

Avoid undefined pointer arithmetic with NULL.
(cherry picked from commit 7c4ab2af)
Co-authored-by: Zackery Spytz <zspytz@gmail.com>

Downstream vendors have started to deprecate weak keys. Update all RSA keys
and DH params to use at least 2048 bits.

Finite field DH param file use RFC 7919 values, generated with

    certtool --get-dh-params --sec-param=high

Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit 88bfd0bc)
Co-authored-by: Christian Heimes <christian@python.org>

(cherry picked from commit 8f7bb100)

This was backported by mistake in ef19fd20.

The change in the mini language floating point and decimal table
is consistent with 'Exponential notation' and clarifies that we
are referring to the output notation, not an object type.

(cherry picked from commit 28c7f8c8)

(cherry picked from commit 2ebd3813)
Co-authored-by: INADA Naoki <methane@users.noreply.github.com>

Some MacOS-tk combinations need .update_idletasks().
The call is both unneeded and innocuous on Linux and Windows.
Patch by Kevin Walzer.

(cherry picked from commit 9beaef62)
Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

* Fix compilation warning in _ctypes module on Window

(cherry picked from commit 20f11fe4)

* Fix compilation warnings on Windows 64-bit

(cherry picked from commit 725e4212)

* Fix compiler warning in unicodeobject.c

Explicitly case to Py_UNICODE to fix the warning:

Objects\unicodeobject.c(4225): warning C4244: '=' :
conversion from 'long' to 'Py_UNICODE', possible loss of data

The downcast cannot overflow since we check that value <= 0x10ffff.

Use a local scope for the 'i' variable.

Fixed bpo-29565: Corrected ctypes passing of large structs by value.

Added code and test to check that when a structure passed by value
is large enough to need to be passed by reference, a copy of the
original structure is passed. The callee updates the passed-in value,
and the test verifies that the caller's copy is unchanged. A similar
change was also added to the test added for bpo-20160 (that test was
passing, but the changes should guard against regressions).

(cherry picked from commit a86339b8)

Added missing .grab_release() calls to all places where we call .grab_set().

(cherry picked from commit 10ea9409)