[issue13562] Notes about module load path
New submission from Nam Nguyen <bitsink@gmail.com>: A doc patch to remind Python embedder to set sys.path prior to Py_Initialize. This is to ensure a controlled module load path to work around these issues: http://bugs.python.org/issue12989 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5983 ---------- assignee: docs@python components: Documentation files: module.load.path.diff keywords: patch messages: 149071 nosy: Nam.Nguyen, docs@python priority: normal severity: normal status: open title: Notes about module load path type: feature request versions: Python 2.6, Python 2.7, Python 3.1, Python 3.2 Added file: http://bugs.python.org/file23888/module.load.path.diff _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Éric Araujo <merwok@netwok.org> added the comment: Thanks for the patch, I will make a few wording/markup editions if you don’t mind and post the edited version. ---------- nosy: +eric.araujo versions: +Python 3.3 -Python 2.6, Python 3.1 _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Nam Nguyen <bitsink@gmail.com> added the comment: That would be great. Thank you. ---------- _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Éric Araujo <merwok@netwok.org> added the comment: I did the markup edits but then found out that the doc for Py_Initialize in c-api/init already mentions the module load path and the module table, so I’m going to make another patch with just a link to that. ---------- _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Changes by Eric Snow <ericsnowcurrently@gmail.com>: ---------- nosy: +eric.snow _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Nam Nguyen <bitsink@gmail.com> added the comment: Please do keep the warning though. It is best to warn in both Python-C Py_Initialize() document and the Embedding tutorial. ---------- _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
STINNER Victor <vstinner@python.org> added the comment: No activity since 2012, I close the issue. Moreover, the PEP 587 now provides a clean C API to configure sys.path. https://docs.python.org/dev/c-api/init_config.html#c.PyConfig.module_search_... ---------- nosy: +vstinner resolution: -> out of date stage: -> resolved status: open -> closed _______________________________________ Python tracker <report@bugs.python.org> <https://bugs.python.org/issue13562> _______________________________________
Éric Araujo <merwok@netwok.org> added the comment: Thanks for the patch, I will make a few wording/markup editions if you don’t mind and post the edited version. ---------- nosy: +eric.araujo versions: +Python 3.3 -Python 2.6, Python 3.1 _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Nam Nguyen <bitsink@gmail.com> added the comment: That would be great. Thank you. ---------- _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Éric Araujo <merwok@netwok.org> added the comment: I did the markup edits but then found out that the doc for Py_Initialize in c-api/init already mentions the module load path and the module table, so I’m going to make another patch with just a link to that. ---------- _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Changes by Eric Snow <ericsnowcurrently@gmail.com>: ---------- nosy: +eric.snow _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
Nam Nguyen <bitsink@gmail.com> added the comment: Please do keep the warning though. It is best to warn in both Python-C Py_Initialize() document and the Embedding tutorial. ---------- _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue13562> _______________________________________
STINNER Victor <vstinner@python.org> added the comment: No activity since 2012, I close the issue. Moreover, the PEP 587 now provides a clean C API to configure sys.path. https://docs.python.org/dev/c-api/init_config.html#c.PyConfig.module_search_... ---------- nosy: +vstinner resolution: -> out of date stage: -> resolved status: open -> closed _______________________________________ Python tracker <report@bugs.python.org> <https://bugs.python.org/issue13562> _______________________________________
participants (4)
-
Eric Snow -
Nam Nguyen
-
STINNER Victor
-
Éric Araujo