http://www.lfd.uci.edu/~gohlke/pythonlibs/
This page provides 32- and 64-bit Windows binaries of many scientific open-source extension #packages for the official #CPython distribution of the #Python programming language.
The files are unofficial (meaning: informal, unrecognized, personal, unsupported, no warranty, no liability, provided "as is") and made available for testing and evaluation purposes.
https://www.buzzfeed.com/andrewkelleher/deep-exploration-into-python-lets-review-the-dict-module?utm_term=.rhDeZBxA8#.bgB5DM0Z9
In this series, we’ll take a look at various modules and pieces of functionality of the #Python language. We’ll look at design choices, their impact, and their evolution. We’ll also look at the design of the language itself and learn about the operations of the interpreter as it parses the language all the way to the main eval loop. Finally, we’ll attempt to give practical takeaways that fall out of a deeper understanding of the language.
The #cpython implementation of Python (which is the standard on most machines) has been ported over to GitHub from its home in Mercurial. I think it also had a time under #SVN, but the engineers managed to preserve (for the most part) the commit logs.
AIGC@aigcrubbish · Post #6 · 23.08.2024 г., 06:57
CPython zipfile 模块高危漏洞 CVE-2024-8088
CPython 的 zipfile 模块存在一个高危漏洞,编号为 CVE-2024-8088。该漏洞会导致在处理恶意构造的 zip 档案时,程序陷入无限循环。具体来说,当使用 zipfile.Path 类及其方法(如 namelist()`、`iterdir()`、`extractall() 等)遍历 zip 档案条目名称时,可能会触发无限循环。
此漏洞的根本原因在于 zipfile._path._ancestry() 方法中的路径处理不当。具体来说,代码中的 path.rstrip(posixpath.sep) 和 while 循环条件未正确处理路径,导致无限循环。例如,`posixpath.split("//") 返回 ("//", ""),而 "//" != posixpath.sep` 导致循环无法退出。
该漏洞已被修复,建议更新 CPython 并加强输入验证,以防止潜在的拒绝服务攻击。
原文链接:https://www.openwall.com/lists/oss-security/2024/08/22/1https://www.openwall.com/lists/oss-security/2024/08/22/4
标签:#CPython#漏洞#zipfile#无限循环
#AIGC
https://wiki.python.org/moin/GlobalInterpreterLock
In #CPython, the #global#interpreter lock, or #GIL, is a mutex that prevents multiple native #threads from executing Python bytecodes at once. This lock is necessary mainly because CPython's memory management is not thread-safe. (However, since the GIL exists, other features have grown to depend on the guarantees that it enforces.)
http://lxml.de/
#lxml is the most feature-rich and easy-to-use library for processing #XML and #HTML in the Python language.
The lxml XML toolkit is a Pythonic binding for the #C libraries #libxml2 and #libxslt. It is unique in that it combines the speed and XML feature completeness of these libraries with the simplicity of a native Python #API, mostly compatible but superior to the well-known ElementTree API. The latest release works with all #CPython versions from 2.6 to 3.6. See the introduction for more information about background and goals of the lxml project. Some common questions are answered in the FAQ.
http://www.jaggedverge.com/2017/11/how-a-web-page-request-makes-it-down-to-the-metal/
How a web page request makes it down to the metal
by : Janis Posted in : Tutorials, work-in-progess Tags : #NGINX, #Python No Comments
The other day I was interested in how many steps occur between sending a #POST or #GET#request from a website to the actual processing that happens on the CPU of the #server. I figured that I knew bits and pieces of the puzzle but I wanted to see the complete path from the highest levels of abstraction all the way to the lowest without missing anything too big in-between. It turns out that in a modern web system there are a lot of steps. I have been really fascinated by this much like the explorer that wants to find a path from one known place to another. If you are interested in better understanding how your computer works you might find walking along this path with your tech stack helpful.
Frontend
prelude: GET request
Browser page #rendering
POST request
sidenote: #CSRF#token
Network stack
sidenote: The Internet
#TCP
sidenote: more comprehensive treatment of network stack
Backend
Handling web request
#WSGI
#Django
Django URL routing
Django views
Python implementations
#CPython
CPython bytecode
CPython bytecode execution details
Machine Code
CPython to machine code
Machine code execution
Hardware implementation details
Microcode
Processor #pipeline
Silicon implementation of addition
Silicon adder unit
AND gate
Transistor