[issue11829] inspect.getattr_static code execution with meta-metaclasses
Andreas Stührk andy-pyt...@hammerhartes.de added the comment: As the test demonstrates, it's still possible to trigger a dynamic lookup without the patch, hence I think this is still needed and valid, yes. I updated the patch to make it reflect the latest committed changes. -- Added file: http://bugs.python.org/file24073/getattr_static_metaclasses_v2.patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11829 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue11829] inspect.getattr_static code execution with meta-metaclasses
Roundup Robot devn...@psf.upfronthosting.co.za added the comment: New changeset 8f33758df19a by Michael Foord in branch '3.2': Metaclasses with metaclasses with a __dict__ descriptor can no longer trigger code execution with inspect.getattr_static. http://hg.python.org/cpython/rev/8f33758df19a -- nosy: +python-dev resolution: - fixed stage: patch review - committed/rejected status: open - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11829 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue11829] inspect.getattr_static code execution with meta-metaclasses
Michael Foord mich...@voidspace.org.uk added the comment: Andreas, is this still needed and valid? -- assignee: - michael.foord ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11829 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue11829] inspect.getattr_static code execution with meta-metaclasses
Changes by Antoine Pitrou pit...@free.fr: -- nosy: +ncoghlan stage: - patch review ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11829 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue11829] inspect.getattr_static code execution with meta-metaclasses
New submission from Andreas Stührk andy-pyt...@hammerhartes.de: The commit for issue #11133 omitted a part of the patch that checked whether the __dict__ attribute of metaclasses are shadowed. That makes it possible to trigger code execution in the case of metaclasses that have metaclasses. Attached is a patch with a test and a fix. -- components: Library (Lib) files: getattr_static_metaclasses.patch keywords: patch messages: 133549 nosy: Trundle, michael.foord priority: normal severity: normal status: open title: inspect.getattr_static code execution with meta-metaclasses type: behavior versions: Python 3.2, Python 3.3 Added file: http://bugs.python.org/file21621/getattr_static_metaclasses.patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11829 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
