update to python 3.8.5

Author: chcg

PythonLib/full/asyncio/tasks.py

@@ -736,6 +736,13 @@ def gather(*coros_or_futures, loop=None, return_exceptions=False):
     the outer Future is *not* cancelled in this case.  (This is to
     prevent the cancellation of one child to cause other children to
     be cancelled.)
+
+    If *return_exceptions* is False, cancelling gather() after it
+    has been marked done won't cancel any submitted awaitables.
+    For instance, gather can be marked done after propagating an
+    exception to the caller, therefore, calling ``gather.cancel()``
+    after catching an exception (raised by one of the awaitables) from
+    gather won't cancel any other awaitables.
     """
     if not coros_or_futures:
         if loop is None:

PythonLib/full/http/client.py

@@ -147,6 +147,10 @@
 #  _is_allowed_url_pchars_re = re.compile(r"^[/!$&'()*+,;=:@%a-zA-Z0-9._~-]+$")
 # We are more lenient for assumed real world compatibility purposes.
 
+# These characters are not allowed within HTTP method names
+# to prevent http header injection.
+_contains_disallowed_method_pchar_re = re.compile('[\x00-\x1f]')
+
 # We always set the Content-Length header for these methods because some
 # servers will otherwise respond with a 411
 _METHODS_EXPECTING_BODY = {'PATCH', 'POST', 'PUT'}
@@ -1087,6 +1091,8 @@ def putrequest(self, method, url, skip_host=False,
         else:
             raise CannotSendRequest(self.__state)
 
+        self._validate_method(method)
+
         # Save the method for use later in the response phase
         self._method = method
 
@@ -1177,6 +1183,15 @@ def _encode_request(self, request):
         # ASCII also helps prevent CVE-2019-9740.
         return request.encode('ascii')
 
+    def _validate_method(self, method):
+        """Validate a method name for putrequest."""
+        # prevent http header injection
+        match = _contains_disallowed_method_pchar_re.search(method)
+        if match:
+            raise ValueError(
+                    f"method can't contain control characters. {method!r} "
+                    f"(found at least {match.group()!r})")
+
     def _validate_path(self, url):
         """Validate a url for putrequest."""
         # Prevent CVE-2019-9740.

PythonLib/full/idlelib/NEWS.txt

@@ -1,8 +1,15 @@
-What's New in IDLE 3.8.4
-Released on 2020-07-03?
+What's New in IDLE 3.8.5
+Released on 2020-07-20
 ======================================
 
 
+bpo-41300: Save files with non-ascii chars.  Fix regression in
+3.9.0b4 and 3.8.4.
+
+What's New in IDLE 3.8.4
+Released on 2020-06-30
+======================================
+
 bpo-37765: Add keywords to module name completion list.  Rewrite
 Completions section of IDLE doc.
 

PythonLib/full/idlelib/iomenu.py

@@ -1,3 +1,4 @@
+import io
 import os
 import shlex
 import sys

PythonLib/full/pydoc_data/topics.py

@@ -1,5 +1,5 @@
 # -*- coding: utf-8 -*-
-# Autogenerated by Sphinx on Mon Jul 13 13:47:56 2020
+# Autogenerated by Sphinx on Mon Jul 20 14:14:54 2020
 topics = {'assert': 'The "assert" statement\n'
            '**********************\n'
            '\n'

PythonLib/full/tarfile.py

@@ -1241,6 +1241,8 @@ def _proc_pax(self, tarfile):
 
             length, keyword = match.groups()
             length = int(length)
+            if length == 0:
+                raise InvalidHeaderError("invalid header")
             value = buf[match.end(2) + 1:match.start(1) + length - 1]
 
             # Normally, we could just use "utf-8" as the encoding and "strict"

PythonLib/full/venv/scripts/common/Activate.ps1

@@ -358,28 +358,28 @@ $Env:PATH = "$VenvExecDir$([System.IO.Path]::PathSeparator)$Env:PATH"
 # BAIBBQCggdAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIB
 # CzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIAa54uJnEb+7DCR7MaUT
 # o0aKTs9sLkFayZ5/pQ+1+8voMGQGCisGAQQBgjcCAQwxVjBUoFKAUABCAHUAaQBs
-# AHQAOgAgAFIAZQBsAGUAYQBzAGUAXwBtAGEAcwB0AGUAcgBfAHYAMwAuADgALgA0
-# AF8AMgAwADIAMAAwADcAMQAzAC4AMAAxMA0GCSqGSIb3DQEBAQUABIICAC/Bv7ma
-# 6D/zdiof3jV4D95eWqjo0IJgn/0bwDyZyLp6jctzhZZ5yEtEB3CFQONuDDilSzEA
-# xGMsJKMhfvcrCH05d/hOi3Vr/Bo00m3AJaMjfRpAkgac8DXgddgvBX2jLqFkfCfc
-# 6LGFqLxafor7EJ1W8lPI0kIsG7Pm4RBt6sE/dhbCt72KrzKUYz18kYjwomwh63lP
-# Cv3nZJy6a21u1F6zXjVUmlVy07R6Qz1gUHCsBd4qKK1tEcL4zV5gzqbXmoC7GM6J
-# Cc+GreiCZORXrn0K2HcHhwYjlykMowAYWpnUh94J9KLErNOqfMLcT7h/DBufuEMs
-# iU1dAm8yq6Htz8Fx/8bws02vfqxeqSUFCQlpt5q/eWn54b/TCFG0uICXg/iXCzeO
-# RmYqkPoHuAP29FZ6AtYccIo9MHu3e1VJR69uJ6dcvtrMLd+azyM9KAhwhqsVCq1z
-# hDFxqEEpn/Gn8Ke+thWNN6rQaYmwsZnqlTbXmMxpq2uG3Zbl5GhGwpo4sMWu2i/E
-# 50OlrrApLWAcCygUs1dYB7cOiRV0RgUaHKC0niYFSsSyk2aUzrt7iT6UDPSQk3HN
-# Ewz78WG5ZR+gMwJH3gSD1jQ8tjH0ZQ/rnpdr3C4jN4trKsNkklzb1nKNJgXxf9M4
-# LhPfed4ktsxQhzaWT6to1B6bkoP46ojWoy8zoYICCzCCAgcGCSqGSIb3DQEJBjGC
+# AHQAOgAgAFIAZQBsAGUAYQBzAGUAXwBtAGEAcwB0AGUAcgBfAHYAMwAuADgALgA1
+# AF8AMgAwADIAMAAwADcAMgAwAC4AMAAxMA0GCSqGSIb3DQEBAQUABIICAFg3EwBr
+# ToMgKMwSTOcujmhqoDp070+/0h95PSJYRRcX707Fk+Mc1f+m2ZUQvUptPsDVFB5v
+# 2rgihNuH21N6jBYl886DoyrPx3xBCmHrhqjDmxsI3s2pMz24W10SmzHIciRC2eaE
+# p1oBNYVqDml8t1XUDELJ8ZumXZyvHFg7aqnxqFopCJRl0/jJp+t0yl7E3DRr5Md5
+# dTtx04x4nG2jKF2v8K964TM6js4GGWMk6ZZJr/WNiyEqnRbiqREYvSGg4ruuz3Mr
+# KMDz0Dd8gzNNidHpkUswhL+81QvnRU3Wc7vDmiA/H8JoVtlFHbQy8CGBV0QpTQXf
+# bpgXXYx6Ij12Hp99gGsAKHhJ8pV4sNaugdPNd312qFiqTmrard9YBMcZmaamTcZq
+# IIVjfcryhIfUbbv8WlMarZUPFMCAOiLp5H7NohkJciM9oPHKsLbBIPjNPFEHs6T/
+# fSQDGhvZJcp+qplVF9tENCfhZXcWydNsXPgjCYHUSV42da9x7OUQuNPP1Lo4Ocbs
+# FKbApNVlJt+dSRaoQZ0viuJIqq9FRwMGAOo7l/NqqGr/Xc9f361Ux1XyNgSH3TTq
+# 4GXLdCfTvPpqjNT+JSWlhKBU6qaer0ZtDYibGjRNZovdtF4P4dGgJpcPS7C8WU5Z
+# k6fY7Iymi3zhtsFObCck9UhxlWECeEb6u8DfoYICCzCCAgcGCSqGSIb3DQEJBjGC
 # AfgwggH0AgEBMHIwXjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENv
 # cnBvcmF0aW9uMTAwLgYDVQQDEydTeW1hbnRlYyBUaW1lIFN0YW1waW5nIFNlcnZp
 # Y2VzIENBIC0gRzICEA7P9DjI/r81bgTYapgbGlAwCQYFKw4DAhoFAKBdMBgGCSqG
-# SIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIwMDcxMzE2NTAz
-# N1owIwYJKoZIhvcNAQkEMRYEFJQUANPb3dph7D+JPjIj60tSDGR8MA0GCSqGSIb3
-# DQEBAQUABIIBAFd+h16DGgs73F8dCTWaPiKfem+/GI9gNeI7XX9RoL09q36vik6N
-# GPnfvEFaaypo3tOoqjypNJ1ecKg6FsgL36RrbttIuw++hJ5cR0YZUfJPt79hoGRf
-# oVuPqfJ8W9KCsX9Kto8auGCyQWNbMpYRt3jjUeIkwUtgIAqLSLuaQhWBvudYm3j2
-# WQE9H6ozxBVc0ZK8OAtgOvfrCtUx8LdL8eglnqn73JnzcvYu47pyOMdi9zSMMiJk
-# 7keXnHehdSX/atU9vXTAnNEw6ANggOk0EzbGPoF8Not3zjFBf8/9FrVN7OJaV9Pq
-# 4Ytqoat07zJwIVGXsqPgFtNdutsC6+ZFZJw=
+# SIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIwMDcyMDE2MDEy
+# OFowIwYJKoZIhvcNAQkEMRYEFO7wVdDn5z2aadmfHn304QcCt8vtMA0GCSqGSIb3
+# DQEBAQUABIIBAIEhdHyvoEfBOYDp61noPGP6NI2zqyY1//J7cSp64b6LxsgMRlBS
+# lHYzU3aBqE9LvBC7FOmvPsp6GPZ8+M1OAXuKYsPi+qPCRkOE24jQ422oUKsebzce
+# cKrQB8VaLwz90Onx6cZsmy1N7Rj+yGrmQW9FIbf7ba09Zody7xA0dHX1REEikMLG
+# wcL/YjJ3TmcBtRRzlXarYi7RVl91Iv4awRPjTb8TTCNpdYNk8hE7uvmH4Tf0URgb
+# ttcyJZg4DTFHac1XjsdbDnjk8dx6WPdgzS5BMzjT9sAjQjAp8MPoT6e1ODv37LZf
+# c/Ls7e0pR0R/7Vw01YEKyXTy9FBlGF6l+UU=
 # SIG # End signature block