Support unpacking wheels that contain files with commas in their names

src/wheel/wheelfile.py

@@ -8,6 +8,7 @@
 import time
 from collections import OrderedDict
 from distutils import log as logger
+from io import TextIOWrapper
 from zipfile import ZIP_DEFLATED, ZipInfo, ZipFile
 
 from wheel.cli import WheelError
@@ -60,23 +61,24 @@ def __init__(self, file, mode='r', compression=ZIP_DEFLATED):
                 raise WheelError('Missing {} file'.format(self.record_path))
 
             with record:
-                for line in record:
-                    line = line.decode('utf-8')
-                    path, hash_sum, size = line.rsplit(u',', 2)
-                    if hash_sum:
-                        algorithm, hash_sum = hash_sum.split(u'=')
-                        try:
-                            hashlib.new(algorithm)
-                        except ValueError:
-                            raise WheelError('Unsupported hash algorithm: {}'.format(algorithm))
-
-                        if algorithm.lower() in {'md5', 'sha1'}:
-                            raise WheelError(
-                                'Weak hash algorithm ({}) is not permitted by PEP 427'
-                                .format(algorithm))
-
-                        self._file_hashes[path] = (
-                            algorithm, urlsafe_b64decode(hash_sum.encode('ascii')))
+                for line in csv.reader(TextIOWrapper(record, newline=u'')):
+                    path, hash_sum, size = line
+                    if not hash_sum:
+                        continue
+
+                    algorithm, hash_sum = hash_sum.split(u'=')
+                    try:
+                        hashlib.new(algorithm)
+                    except ValueError:
+                        raise WheelError('Unsupported hash algorithm: {}'.format(algorithm))
+
+                    if algorithm.lower() in {'md5', 'sha1'}:
+                        raise WheelError(
+                            'Weak hash algorithm ({}) is not permitted by PEP 427'
+                            .format(algorithm))
+
+                    self._file_hashes[path] = (
+                        algorithm, urlsafe_b64decode(hash_sum.encode('ascii')))
 
     def open(self, name_or_info, mode="r", pwd=None):
         def _update_crc(newdata, eof=None):

tests/conftest.py

@@ -12,7 +12,7 @@
 @pytest.fixture(scope='session')
 def wheels_and_eggs(tmpdir_factory):
     """Build wheels and eggs from test distributions."""
-    test_distributions = "complex-dist", "simple.dist", "headers.dist"
+    test_distributions = "complex-dist", "simple.dist", "headers.dist", "commasinfilenames.dist"
     if sys.version_info >= (3, 6):
         # Only Python 3.6+ can handle packaging unicode file names reliably
         # across different platforms

tests/testdata/commasinfilenames.dist/setup.py

@@ -0,0 +1,12 @@
+from setuptools import setup
+
+setup(
+    name='testrepo',
+    version='0.1',
+    packages=["mypackage"],
+    description='A test package with commas in file names',
+    include_package_data=True,
+    package_data={
+        "mypackage.data": ["*"]
+    },
+)