FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Allow savefig to save SVGs on FIPS enabled systems #18192 by daytonb · Pull Request #18193 · matplotlib/matplotlib · GitHub

  1. matplotlib
  2. matplotlib

Repository navigation

Allow savefig to save SVGs on FIPS enabled systems #18192 - #18193

Merged
jkseppan merged 2 commits into
matplotlib:masterfrom
daytonb:fips-compatible
Aug 7, 2020
ConversationCommits (2)ChecksFiles changed
Merged

Allow savefig to save SVGs on FIPS enabled systems #18192#18193
jkseppan merged 2 commits into
matplotlib:masterfrom
daytonb:fips-compatible

Conversation

daytonb commented Aug 6, 2020 •
edited
Loading

Copy link
Copy Markdown
Contributor

PR Summary

This pull request resolves #18192.

If you use a FIPS (Federal Information Processing Standards) enabled system, then you cannot use plt.savefig to save an image in SVG format. This is because the RenderSVG._make_id method takes the first 10 characters of a hashlib.md5 digest of entries in the SVG as the ID for entries in the SVG file.

The Python docs for hashlib includes the following note:

Constructors for hash algorithms that are always present in this module are sha1(), sha224(), sha256(), sha384(), sha512(), blake2b(), and blake2s(). md5() is normally available as well, though it may be missing if you are using a rare “FIPS compliant” build of Python.

PR Checklist

  • [na ] Has Pytest style unit tests
    - Not sure if this is applicable to my change
  • Code is Flake 8 compliant
  • [na] New features are documented, with examples if plot related
  • Documentation is sphinx and numpydoc compliant
  • [na] Added an entry to doc/users/next_whats_new/ if major new feature (follow instructions in README.rst there)
    - Not a major feature
  • Documented in doc/api/next_api_changes/* if API changed in a backward-incompatible way

daytonb mentioned this pull request Aug 6, 2020
Closed
dstansby reviewed Aug 6, 2020
View reviewed changes

dstansby left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Seems like a reasonable approach. Is this injected into the .svg files? If so it would be good to add a quick note to doc/api/next_api_changes/behavior to say that the contents will be slightly different, just in case there is anybody comparing the hashes of matplotlib generated .svg files.

daytonb commented Aug 6, 2020 via email

Copy link
Copy Markdown
Contributor Author

dopplershift added this to the v3.4.0 milestone Aug 7, 2020

daytonb commented Aug 7, 2020

Copy link
Copy Markdown
Contributor Author

Alright I've added a file to the doc/api/next_api_changes/behavior. Let me know if the description seems unclear and needs tweaking.

QuLogic reviewed Aug 7, 2020
View reviewed changes
Comment thread doc/api/next_api_changes/behavior/18193-BKB.rst Outdated
Comment thread doc/api/next_api_changes/behavior/18193-BKB.rst Outdated

daytonb commented Aug 7, 2020

Copy link
Copy Markdown
Contributor Author

I re-wrote the behavior change note to no longer reference the private method. I was also previously getting an error from the circleci doc tests that I think was from the warnings Sphinx gave about my references to hashlib.md5 and RenderSVG._make_id. The warnings said that Sphinx couldn't find these pyobjs to link to them. Obviously I removed the reference to RenderSVG._make_id so that won't be a problem any more, but I also reworded my note about hashlib.md5 to avoid having to do a intersphinx reference.

jklymak approved these changes Aug 7, 2020
View reviewed changes

jklymak left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

This seems fine to me. I don't know that it really needs an API change note - the origin of the hash is just an implementation detail of the unique ID, and its not like the user needs to know that. But, I guess it doesn't hurt.

jkseppan merged commit 9b7f94f into matplotlib:master Aug 7, 2020

jkseppan commented Aug 7, 2020

Copy link
Copy Markdown
Member

Thanks @daytonb!

daytonb commented Aug 7, 2020

Copy link
Copy Markdown
Contributor Author

It's been a pleasure!

martinky24 mentioned this pull request Feb 12, 2025
Merged
2 tasks done
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

QuLogic QuLogic left review comments
dstansby dstansby left review comments
jkseppan jkseppan approved these changes
jklymak jklymak approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

v3.4.0

Development

Successfully merging this pull request may close these issues.

Cannot save SVG file with FIPS compliant Python

6 participants

Back | FazBrowse Home | New Git URL