python37: updated to 3.7.3

Python 3.7.3:
Security
bpo-36216: Changes urlsplit() to raise ValueError when the URL contains characters that decompose under IDNA encoding (NFKC-normalization) into characters that affect how the URL is parsed.
bpo-35746: [CVE-2019-5010] Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL distribution points with empty DP or URI correctly. A malicious or buggy certificate can result into segfault. Vulnerability (TALOS-2018-0758) reported by Colin Read and Nicolas Edet of Cisco.
bpo-35121: Don’t send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with http.cookiejar.DefaultCookiePolicy policy. Patch by Karthikeyan Singaravelan.

Core and Builtins
bpo-35942: The error message emitted when returning invalid types from __fspath__ in interfaces that allow passing PathLike objects has been improved and now it does explain the origin of the error.
bpo-35992: Fix __class_getitem__() not being called on a class with a custom non-subscriptable metaclass.
bpo-35991: Fix a potential double free in Modules/_randommodule.c.
bpo-35961: Fix a crash in slice_richcompare(): use strong references rather than stolen references for the two temporary internal tuples.
bpo-31506: Clarify the errors reported when object.__new__ and object.__init__ receive more than one argument. Contributed by Sanyam Khurana.
bpo-35720: Fixed a minor memory leak in pymain_parse_cmdline_impl function in Modules/main.c
bpo-35623: Fix a crash when sorting very long lists. Patch by Stephan Hohe.
bpo-35214: clang Memory Sanitizer build instrumentation was added to work around false positives from posix, socket, time, test_io, and test_faulthandler.
bpo-35560: Fix an assertion error in format() in debug build for floating point formatting with “n” format, zero padding and small width. Release build is not impacted. Patch by Karthikeyan Singaravelan.
bpo-35552: Format characters %s and %V in PyUnicode_FromFormat() and %s in PyBytes_FromFormat() no longer read memory past the limit if precision is specified.
bpo-35504: Fix segfaults and SystemErrors when deleting certain attributes. Patch by Zackery Spytz.
bpo-33989: Fix a possible crash in list.sort() when sorting objects with ob_type->tp_richcompare == NULL. Patch by Zackery Spytz.

Library
bpo-35931: The pdb debug command now gracefully handles all exceptions.
bpo-36251: Fix format strings used for stderrprinter and re.Match reprs. Patch by Stephan Hohe.
bpo-35807: Update ensurepip to install pip 19.0.3 and setuptools 40.8.0.
bpo-36179: Fix two unlikely reference leaks in _hashopenssl. The leaks only occur in out-of-memory cases.
bpo-35178: Ensure custom warnings.formatwarning() function can receive line as positional argument. Based on patch by Tashrif Billah.
bpo-36106: Resolve potential name clash with libm’s sinpi(). Patch by Dmitrii Pasechnik.
bpo-35512: unittest.mock.patch.dict() used as a decorator with string target resolves the target during function call instead of during decorator construction. Patch by Karthikeyan Singaravelan.
bpo-36091: Clean up reference to async generator in Lib/types. Patch by Henry Chen.
bpo-35899: Enum has been fixed to correctly handle empty strings and strings with non-Latin characters (ie. ‘α’, ‘א’) without crashing. Original patch contributed by Maxwell. Assisted by Stéphane Wirtel.
bpo-35918: Removed broken has_key method from multiprocessing.managers.SyncManager.dict. Contributed by Rémi Lapeyre.
bpo-35960: Fix dataclasses.field() throwing away empty mapping objects passed as metadata.
bpo-35847: RISC-V needed the CTYPES_PASS_BY_REF_HACK. Fixes ctypes Structure test_pass_by_value.
bpo-35780: Fix lru_cache() errors arising in recursive, reentrant, or multi-threaded code. These errors could result in orphan links and in the cache being trapped in a state with fewer than the specified maximum number of links. Fix handling of negative maxsize which should have been treated as zero. Fix errors in toggling the “full” status flag. Fix misordering of links when errors are encountered. Sync-up the C code and pure Python code for the space saving path in functions with a single positional argument. In this common case, the space overhead of an lru cache entry is reduced by almost half. Fix counting of cache misses. In error cases, the miss count was out of sync with the actual number of times the underlying user function was called.
bpo-23846: asyncio.ProactorEventLoop now catches and logs send errors when the self-pipe is full.
bpo-34323: asyncio: Enhance IocpProactor.close() log: wait 1 second before the first log, then log every second. Log also the number of seconds since close() was called.
bpo-34294: re module, fix wrong capturing groups in rare cases. re.search(), re.findall(), re.sub() and other functions that scan through string looking for a match, should reset capturing groups between two match attempts. Patch by Ma Lin.
bpo-35717: Fix KeyError exception raised when using enums and compile. Patch contributed by Rémi Lapeyre.
bpo-35699: Fixed detection of Visual Studio Build Tools 2017 in distutils
bpo-32710: Fix memory leaks in asyncio ProactorEventLoop on overlapped operation failure.
bpo-32710: Fix a memory leak in asyncio in the ProactorEventLoop when ReadFile() or WSASend() overlapped operation fail immediately: release the internal buffer.
bpo-35682: Fix asyncio.ProactorEventLoop.sendfile(): don’t attempt to set the result of an internal future if it’s already done.
bpo-35283: Add a pending deprecated warning for the threading.Thread.isAlive() method. Patch by Dong-hee Na.
bpo-35643: Fixed a SyntaxWarning: invalid escape sequence in Modules/_sha3/cleanup.py. Patch by Mickaël Schoentgen.
bpo-35615: weakref: Fix a RuntimeError when copying a WeakKeyDictionary or a WeakValueDictionary, due to some keys or values disappearing while iterating.
bpo-28503: The crypt module now internally uses the crypt_r() library function instead of crypt() when available.
bpo-35121: Don’t set cookie for a request when the request path is a prefix match of the cookie’s path attribute but doesn’t end with “/”. Patch by Karthikeyan Singaravelan.
bpo-35585: Speed-up building enums by value, e.g. http.HTTPStatus(200).
bpo-21478: Calls to a child function created with unittest.mock.create_autospec() should propagate to the parent. Patch by Karthikeyan Singaravelan.
bpo-35513: TextTestRunner of unittest.runner now uses time.perf_counter() rather than time.time() to measure the execution time of a test: time.time() can go backwards, whereas time.perf_counter() is monotonic.
bpo-35502: Fixed reference leaks in xml.etree.ElementTree.TreeBuilder in case of unfinished building of the tree (in particular when an error was raised during parsing XML).
bpo-31446: Copy command line that was passed to CreateProcessW since this function can change the content of the input buffer.
bpo-20239: Allow repeated assignment deletion of unittest.mock.Mock attributes. Patch by Pablo Galindo.
bpo-17185: Set __signature__ on mock for inspect to get signature. Patch by Karthikeyan Singaravelan.
bpo-10496: check_environ() of distutils.utils now catches KeyError on calling pwd.getpwuid(): don’t create the HOME environment variable in this case.
bpo-35066: Previously, calling the strftime() method on a datetime object with a trailing ‘%’ in the format string would result in an exception. However, this only occured when the datetime C module was being used; the python implementation did not match this behavior. Datetime is now PEP-399 compliant, and will not throw an exception on a trailing ‘%’.
bpo-24746: Avoid stripping trailing whitespace in doctest fancy diff. Orignial patch by R. David Murray & Jairo Trad. Enhanced by Sanyam Khurana.
bpo-35198: Fix C++ extension compilation on AIX
bpo-28441: On Cygwin and MinGW, ensure that sys.executable always includes the full filename in the path, including the .exe suffix (unless it is a symbolic link).
bpo-34572: Fix C implementation of pickle.loads to use importlib’s locking mechanisms, and thereby avoid using partially-loaded modules. Patch by Tim Burgess.
bpo-33687: Fix the call to os.chmod() for uu.decode() if a mode is given or decoded. Patch by Timo Furrer.
bpo-32146: Document the interaction between frozen executables and the spawn and forkserver start methods in multiprocessing.

4 files changed, 62 insertions, 61 deletions

diff --git a/lang/python37/Makefile b/lang/python37/Makefile
index 3581d601bb2..0a02e9eed9c 100644
--- a/lang/python37/Makefile
+++ b/lang/python37/Makefile
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.4 2019/03/02 13:23:36 adam Exp $
+# $NetBSD: Makefile,v 1.5 2019/03/26 20:54:55 adam Exp $
 
 .include "dist.mk"
 
 PKGNAME=	python37-${PY_DISTVERSION}
-PKGREVISION=	1
 CATEGORIES=	lang python
 
 MAINTAINER=	pkgsrc-users@NetBSD.org
@@ -105,52 +104,52 @@ PRINT_PLIST_AWK+=	{ gsub(/python${PY_VER_SUFFIX}/, \
 TEST_TARGET=	test
 INSTALL_TARGET=	altinstall
 
-REPLACE_INTERPRETER+=	py37
-REPLACE.py37.old=	.*python[^ ]*
-REPLACE.py37.new=	${PREFIX}/bin/python${PY_VER_SUFFIX}
-REPLACE_FILES.py37+=	Lib/base64.py
-REPLACE_FILES.py37+=	Lib/cProfile.py
-REPLACE_FILES.py37+=	Lib/cgi.py
-REPLACE_FILES.py37+=	Lib/encodings/rot_13.py
-REPLACE_FILES.py37+=	Lib/idlelib/pyshell.py
-REPLACE_FILES.py37+=	Lib/keyword.py
-REPLACE_FILES.py37+=	Lib/lib2to3/pgen2/token.py
-REPLACE_FILES.py37+=	Lib/lib2to3/tests/data/different_encoding.py
-REPLACE_FILES.py37+=	Lib/lib2to3/tests/data/false_encoding.py
-REPLACE_FILES.py37+=	Lib/lib2to3/tests/pytree_idempotency.py
-REPLACE_FILES.py37+=	Lib/pdb.py
-REPLACE_FILES.py37+=	Lib/platform.py
-REPLACE_FILES.py37+=	Lib/profile.py
-REPLACE_FILES.py37+=	Lib/pydoc.py
-REPLACE_FILES.py37+=	Lib/quopri.py
-REPLACE_FILES.py37+=	Lib/smtpd.py
-REPLACE_FILES.py37+=	Lib/smtplib.py
-REPLACE_FILES.py37+=	Lib/symbol.py
-REPLACE_FILES.py37+=	Lib/tabnanny.py
-REPLACE_FILES.py37+=	Lib/tarfile.py
-REPLACE_FILES.py37+=	Lib/test/bisect.py
-REPLACE_FILES.py37+=	Lib/test/crashers/recursive_call.py
-REPLACE_FILES.py37+=	Lib/test/curses_tests.py
-REPLACE_FILES.py37+=	Lib/test/re_tests.py
-REPLACE_FILES.py37+=	Lib/test/regrtest.py
-REPLACE_FILES.py37+=	Lib/timeit.py
-REPLACE_FILES.py37+=	Lib/trace.py
-REPLACE_FILES.py37+=	Lib/turtledemo/__main__.py
-REPLACE_FILES.py37+=	Lib/turtledemo/bytedesign.py
-REPLACE_FILES.py37+=	Lib/turtledemo/clock.py
-REPLACE_FILES.py37+=	Lib/turtledemo/forest.py
-REPLACE_FILES.py37+=	Lib/turtledemo/fractalcurves.py
-REPLACE_FILES.py37+=	Lib/turtledemo/lindenmayer.py
-REPLACE_FILES.py37+=	Lib/turtledemo/minimal_hanoi.py
-REPLACE_FILES.py37+=	Lib/turtledemo/paint.py
-REPLACE_FILES.py37+=	Lib/turtledemo/peace.py
-REPLACE_FILES.py37+=	Lib/turtledemo/penrose.py
-REPLACE_FILES.py37+=	Lib/turtledemo/planet_and_moon.py
-REPLACE_FILES.py37+=	Lib/turtledemo/sorting_animate.py
-REPLACE_FILES.py37+=	Lib/turtledemo/tree.py
-REPLACE_FILES.py37+=	Lib/turtledemo/yinyang.py
-REPLACE_FILES.py37+=	Lib/uu.py
-REPLACE_FILES.py37+=	Lib/webbrowser.py
+REPLACE_INTERPRETER+=	python
+REPLACE.python.old=	.*python[^ ]*
+REPLACE.python.new=	${PREFIX}/bin/python${PY_VER_SUFFIX}
+REPLACE_FILES.python+=	Lib/base64.py
+REPLACE_FILES.python+=	Lib/cProfile.py
+REPLACE_FILES.python+=	Lib/cgi.py
+REPLACE_FILES.python+=	Lib/encodings/rot_13.py
+REPLACE_FILES.python+=	Lib/idlelib/pyshell.py
+REPLACE_FILES.python+=	Lib/keyword.py
+REPLACE_FILES.python+=	Lib/lib2to3/pgen2/token.py
+REPLACE_FILES.python+=	Lib/lib2to3/tests/data/different_encoding.py
+REPLACE_FILES.python+=	Lib/lib2to3/tests/data/false_encoding.py
+REPLACE_FILES.python+=	Lib/lib2to3/tests/pytree_idempotency.py
+REPLACE_FILES.python+=	Lib/pdb.py
+REPLACE_FILES.python+=	Lib/platform.py
+REPLACE_FILES.python+=	Lib/profile.py
+REPLACE_FILES.python+=	Lib/pydoc.py
+REPLACE_FILES.python+=	Lib/quopri.py
+REPLACE_FILES.python+=	Lib/smtpd.py
+REPLACE_FILES.python+=	Lib/smtplib.py
+REPLACE_FILES.python+=	Lib/symbol.py
+REPLACE_FILES.python+=	Lib/tabnanny.py
+REPLACE_FILES.python+=	Lib/tarfile.py
+REPLACE_FILES.python+=	Lib/test/bisect_cmd.py
+REPLACE_FILES.python+=	Lib/test/crashers/recursive_call.py
+REPLACE_FILES.python+=	Lib/test/curses_tests.py
+REPLACE_FILES.python+=	Lib/test/re_tests.py
+REPLACE_FILES.python+=	Lib/test/regrtest.py
+REPLACE_FILES.python+=	Lib/timeit.py
+REPLACE_FILES.python+=	Lib/trace.py
+REPLACE_FILES.python+=	Lib/turtledemo/__main__.py
+REPLACE_FILES.python+=	Lib/turtledemo/bytedesign.py
+REPLACE_FILES.python+=	Lib/turtledemo/clock.py
+REPLACE_FILES.python+=	Lib/turtledemo/forest.py
+REPLACE_FILES.python+=	Lib/turtledemo/fractalcurves.py
+REPLACE_FILES.python+=	Lib/turtledemo/lindenmayer.py
+REPLACE_FILES.python+=	Lib/turtledemo/minimal_hanoi.py
+REPLACE_FILES.python+=	Lib/turtledemo/paint.py
+REPLACE_FILES.python+=	Lib/turtledemo/peace.py
+REPLACE_FILES.python+=	Lib/turtledemo/penrose.py
+REPLACE_FILES.python+=	Lib/turtledemo/planet_and_moon.py
+REPLACE_FILES.python+=	Lib/turtledemo/sorting_animate.py
+REPLACE_FILES.python+=	Lib/turtledemo/tree.py
+REPLACE_FILES.python+=	Lib/turtledemo/yinyang.py
+REPLACE_FILES.python+=	Lib/uu.py
+REPLACE_FILES.python+=	Lib/webbrowser.py
 
 # XXX: It might be needed to add manually more paths like ${PREFIX}/qt5/lib
 # Test: python -c 'from ctypes.util import find_library; print(find_library("ffi"));'
diff --git a/lang/python37/PLIST b/lang/python37/PLIST
index 42ccb63be53..645d24decc3 100644
--- a/lang/python37/PLIST
+++ b/lang/python37/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.4 2018/12/31 10:07:59 adam Exp $
+@comment $NetBSD: PLIST,v 1.5 2019/03/26 20:54:55 adam Exp $
 bin/2to3-${PY_VER_SUFFIX}
 bin/pydoc${PY_VER_SUFFIX}
 ${PLIST.pymalloc}bin/python${PY_VER_SUFFIX}
@@ -1374,8 +1374,8 @@ lib/python${PY_VER_SUFFIX}/ensurepip/__init__.pyo
 lib/python${PY_VER_SUFFIX}/ensurepip/__main__.py
 lib/python${PY_VER_SUFFIX}/ensurepip/__main__.pyc
 lib/python${PY_VER_SUFFIX}/ensurepip/__main__.pyo
-lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/pip-18.1-py2.py3-none-any.whl
-lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/setuptools-40.6.2-py2.py3-none-any.whl
+lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/pip-19.0.3-py2.py3-none-any.whl
+lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/setuptools-40.8.0-py2.py3-none-any.whl
 lib/python${PY_VER_SUFFIX}/ensurepip/_uninstall.py
 lib/python${PY_VER_SUFFIX}/ensurepip/_uninstall.pyc
 lib/python${PY_VER_SUFFIX}/ensurepip/_uninstall.pyo
@@ -2641,9 +2641,9 @@ lib/python${PY_VER_SUFFIX}/test/badsyntax_future7.py
 lib/python${PY_VER_SUFFIX}/test/badsyntax_future8.py
 lib/python${PY_VER_SUFFIX}/test/badsyntax_future9.py
 lib/python${PY_VER_SUFFIX}/test/badsyntax_pep3120.py
-lib/python${PY_VER_SUFFIX}/test/bisect.py
-lib/python${PY_VER_SUFFIX}/test/bisect.pyc
-lib/python${PY_VER_SUFFIX}/test/bisect.pyo
+lib/python${PY_VER_SUFFIX}/test/bisect_cmd.py
+lib/python${PY_VER_SUFFIX}/test/bisect_cmd.pyc
+lib/python${PY_VER_SUFFIX}/test/bisect_cmd.pyo
 lib/python${PY_VER_SUFFIX}/test/bytecode_helper.py
 lib/python${PY_VER_SUFFIX}/test/bytecode_helper.pyc
 lib/python${PY_VER_SUFFIX}/test/bytecode_helper.pyo
@@ -2686,6 +2686,7 @@ lib/python${PY_VER_SUFFIX}/test/cjkencodings/shift_jis-utf8.txt
 lib/python${PY_VER_SUFFIX}/test/cjkencodings/shift_jis.txt
 lib/python${PY_VER_SUFFIX}/test/cjkencodings/shift_jisx0213-utf8.txt
 lib/python${PY_VER_SUFFIX}/test/cjkencodings/shift_jisx0213.txt
+lib/python${PY_VER_SUFFIX}/test/clinic.test
 lib/python${PY_VER_SUFFIX}/test/cmath_testcases.txt
 lib/python${PY_VER_SUFFIX}/test/coding20731.py
 lib/python${PY_VER_SUFFIX}/test/coding20731.pyc
@@ -3122,6 +3123,7 @@ lib/python${PY_VER_SUFFIX}/test/support/script_helper.pyo
 lib/python${PY_VER_SUFFIX}/test/support/testresult.py
 lib/python${PY_VER_SUFFIX}/test/support/testresult.pyc
 lib/python${PY_VER_SUFFIX}/test/support/testresult.pyo
+lib/python${PY_VER_SUFFIX}/test/talos-2019-0758.pem
 lib/python${PY_VER_SUFFIX}/test/test___all__.py
 lib/python${PY_VER_SUFFIX}/test/test___all__.pyc
 lib/python${PY_VER_SUFFIX}/test/test___all__.pyo
diff --git a/lang/python37/dist.mk b/lang/python37/dist.mk
index 33ee04d5575..3fcde783339 100644
--- a/lang/python37/dist.mk
+++ b/lang/python37/dist.mk
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.3 2018/12/31 10:07:59 adam Exp $
+# $NetBSD: dist.mk,v 1.4 2019/03/26 20:54:55 adam Exp $
 
-PY_DISTVERSION=	3.7.2
+PY_DISTVERSION=	3.7.3
 DISTNAME=	Python-${PY_DISTVERSION}
 EXTRACT_SUFX=	.tar.xz
 DISTINFO_FILE=	${.CURDIR}/../../lang/python37/distinfo
diff --git a/lang/python37/distinfo b/lang/python37/distinfo
index 527911473ed..f246d594315 100644
--- a/lang/python37/distinfo
+++ b/lang/python37/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.6 2019/03/02 15:59:37 ryoon Exp $
+$NetBSD: distinfo,v 1.7 2019/03/26 20:54:55 adam Exp $
 
-SHA1 (Python-3.7.2.tar.xz) = c3dc6928516bcb934cf4740461044c79c7c35494
-RMD160 (Python-3.7.2.tar.xz) = 4117feee6360078efea9a09c154b753570154445
-SHA512 (Python-3.7.2.tar.xz) = 6cd2d6d8455558783b99d55985cd7b22d67b98f41a09b4fdd96f680a630a4e035220d2b903f8c59ed513aa5ffe6730fa947ddb55bb72ce36f0e945ef8af5d971
-Size (Python-3.7.2.tar.xz) = 17042320 bytes
+SHA1 (Python-3.7.3.tar.xz) = e3584650a06ae2765da0678176deae9d133f1b3d
+RMD160 (Python-3.7.3.tar.xz) = 0095f3072e17edb789656442290f8abd0ec1bc58
+SHA512 (Python-3.7.3.tar.xz) = 6d9b7c0f1764e0f655a39430a3af6f7b5e3c9b7166c042e780677a54b17ad4ca6d0d9cba262c82b1b70bba8f7c28883dad4cc0d7cc194fc7d2c1b5f4f08a763a
+Size (Python-3.7.3.tar.xz) = 17108364 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 6bef0b219f210045b73ebe66b7ca87570981dbed
 SHA1 (patch-Lib_distutils_command_install.py) = 6fc6f5d918b7581fc62cd0fe55857ee932c3a341
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf