Have strftime() check its time tuple argument to make sure the tuple's values
are within proper boundaries as specified in the docs.
This can break possible code (datetime module needed changing, for instance)
that uses 0 for values that need to be greater 1 or greater (month, day, and
day of year).
Fixes bug #897625.
diff --git a/Misc/NEWS b/Misc/NEWS
index 2d02ed1..892db29 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -167,6 +167,13 @@
Extension modules
-----------------
+- time.strftime() now checks that the values in its time tuple argument
+ are within the proper boundaries to prevent possible crashes from the
+ platform's C library implementation of strftime(). Can possibly
+ break code that uses values outside the range that didn't cause
+ problems previously (such as sitting day of year to 0). Fixes bug
+ #897625.
+
- The socket module now supports Bluetooth sockets, if the
system has <bluetooth/bluetooth.h>