diff options
| author | Gustavo Niemeyer <gustavo@niemeyer.net> | 2002-12-16 13:11:57 (GMT) |
|---|---|---|
| committer | Gustavo Niemeyer <gustavo@niemeyer.net> | 2002-12-16 13:11:57 (GMT) |
| commit | d5ae01a8037d5cba917aef531a3281760e82ed77 (patch) | |
| tree | a610da98e483885db7363f1b28fa9c1af0c5e48c /Misc/NEWS | |
| parent | 822a77fcc761b3c9992950ddf48b3f0bec917b4d (diff) | |
| download | cpython-d5ae01a8037d5cba917aef531a3281760e82ed77.zip cpython-d5ae01a8037d5cba917aef531a3281760e82ed77.tar.gz cpython-d5ae01a8037d5cba917aef531a3281760e82ed77.tar.bz2 | |
Applying patch
[#636769] Fix for major rexec bugs
* Lib/rexec.py
(FileBase): Added 'xreadlines' and '__iter__' to allowed file methods.
(FileWrapper.__init__): Removed unnecessary self.f variable, which gave
direct access to the file object.
(RExec): Added 'xreadlines' and '_weakref' to allowed modules.
(RExec.r_open): Convert string subclasses to a real string classes
before doing comparisons with mode parameter.
* Lib/ihooks.py
(BasicModuleImporter.import_module/reload/unload): Convert the module
name to a real string before working with it.
(ModuleImporter.import_module/import_it/reload): Convert the module
name to a real strings before working with it.
* Misc/NEWS
Document the change.
Diffstat (limited to 'Misc/NEWS')
| -rw-r--r-- | Misc/NEWS | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -667,6 +667,9 @@ Library unix environment even if DISPLAY was not set. Also, support for skipstone browser was included. +- Fixed bug #636769: rexec would run unallowed code if subclasses of + strings were used as parameters for certain functions. + Tools/Demos ----------- |