[issue1514420] Missing module code does spurious file search

[Christian Theune]

Christian Theune added the comment:

I don't think the security risk exists due to this bug. As Python is searching 
for various places anyway, an attacker could just symlink one of those places 
anyway instead of ''.

--
nosy: +ctheune

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1514420] Missing module code does spurious file search

[Mark Lawrence]

Changes by Mark Lawrence :


--
versions: +Python 2.7, Python 3.1, Python 3.2 -Python 2.6, Python 3.0

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1514420] Missing module code does spurious file search

[Ronald Oussoren]

Changes by Ronald Oussoren :


--
nosy:  -ronaldoussoren

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1514420] Missing module code does spurious file search

[Zbyszek Szmek]

Zbyszek Szmek  added the comment:

The bug is certainly not catastrophic, but creates
a slight security risk:

ln -s /etc/shadow ''
some-suid-program -with-error

or whatever.

--
nosy: +zbysz

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1514420] Missing module code does spurious file search

[Daniel Diniz]

Daniel Diniz  added the comment:

Confirmed in py3k and trunk. It's also possible to create a file named
"", I seem to recall discussion on this.

--
nosy: +ajaksu2
stage:  -> test needed
type:  -> behavior
versions: +Python 2.6, Python 3.0 -Python 2.5

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com