I just tried each commit since April 3rd (unpatched horizon in Ubuntu already has those from the 3rd) and they have no effect on the test results. It is only after I remove the patch for CVE-2012-2144 do the tests start passing again. My testing is on Ubuntu 12.04 and consists of:
$ apt-get source horizon
$ apt-get build-dep horizon
$ cd horizon-2012.1
$ cat /tmp/session_fixation.diff | patch -p1
patching file horizon/exceptions.py
patching file horizon/middleware.py
patching file horizon/tests/auth_tests.py
patching file horizon/users.py
patching file horizon/views/auth.py
patching file horizon/views/auth_forms.py
$ PYTHONPATH=. bash run_tests.sh -N
...
Ran 191 tests in 3.604s
FAILED (errors=5)
This mimics what we use in our builds. I (re-)verified that the patch I'm using is the same as the one in this bug. Attached is the failure output.
I just tried each commit since April 3rd (unpatched horizon in Ubuntu already has those from the 3rd) and they have no effect on the test results. It is only after I remove the patch for CVE-2012-2144 do the tests start passing again. My testing is on Ubuntu 12.04 and consists of: fixation. diff | patch -p1 exceptions. py middleware. py tests/auth_ tests.py views/auth. py views/auth_ forms.py
$ apt-get source horizon
$ apt-get build-dep horizon
$ cd horizon-2012.1
$ cat /tmp/session_
patching file horizon/
patching file horizon/
patching file horizon/
patching file horizon/users.py
patching file horizon/
patching file horizon/
$ PYTHONPATH=. bash run_tests.sh -N
...
Ran 191 tests in 3.604s
FAILED (errors=5)
This mimics what we use in our builds. I (re-)verified that the patch I'm using is the same as the one in this bug. Attached is the failure output.