Mailman 3 February 2009 - Python-Dev

Greg Ward email
by Tarek Ziadé 23 Feb '09

23 Feb '09

Hello, I am trying to reach Greg Ward to get a maintainer access to Distutils at PyPI, but his email address at python.net (and some other) doesn't work anymore. Anyone knows how to reach him ? Thanks Tarek -- Tarek Ziadé | Association AfPy | www.afpy.org Blog FR | http://programmation-python.org Blog EN | http://tarekziade.wordpress.com/

2 2

Re: [Python-Dev] Reviving restricted mode?
by P.J. Eby 23 Feb '09

23 Feb '09

At 07:56 PM 2/22/2009 -0800, Guido van Rossum wrote: >On Sun, Feb 22, 2009 at 7:39 PM, P.J. Eby <pje(a)telecommunity.com> wrote: > > Just a question, but, if you just need a pure-python restricted environment > > for App Engine, why not just use the RestrictedPython package (i.e., > > http://pypi.python.org/pypi/RestrictedPython )? > >How does that work? Remember, app engine doesn't support certain >things, and bytecode manipulations (if that's what RestrictedPython >does) are one of the unsupported things. It doesn't modify bytecode, it modifies an AST. It basically replaces prints, and attribute/item read/writes with function calls. Unfortunately, it does this AST modification by running as a traversal against the stdlib compiler package's AST, not a modern AST. So, I suppose it might not be usable as-is on app engine. It does, however, have the advantage of having been used in Zope for oh, six or seven years now? ISTM that it first came out around the same time as Python 2.3, and the latest version just dropped support for Python 2.1 and 2.2. So, if you want something that wasn't thrown together in an afternoon, it might be a good thing to take a look at. ;-) >The other reason I can think of is that Tav is a capabilities purist. :-) You can implement capabilities on top of RestrictedPython; it's simply a policy-neutral enforcement framework.

2 1

Re: [Python-Dev] socket recv on win32 can be extremly delayed $python bug?$
by Simon Laan 23 Feb '09

23 Feb '09

_________________________________________________________________ Blijf altijd op de hoogte van wat jouw vrienden doen http://home.live.com

1 0

gdbinit and Gdb wrapper objects
by Larry (Laurence) Cotton 23 Feb '09

23 Feb '09

Hi I am trying to use python gdb to debug a python process that is hanginig - it is a thread lock situation. I have been trying to use the gdbinit macros to help me in this, but when I attempt to access f->f_nlocals in a PyEval_EvalFrameEx object it informs There is no member named f_nlocals. Consequently pylocals does not work. 1) Does anyone have any idea why this might be happening ? 2) I have been unable to find any documentation (other than the gdbinit macros) about the make up of the Gdb wrapper objects and how to access the information in them. Does anyone know where I might get hold of some ? Cheers Larry Larry Cotton Software Engineer, System Test Broadcom, Cambridge Tel: +44 (0)1223 382835

2 1

Re: [Python-Dev] Reviving restricted mode?
by P.J. Eby 22 Feb '09

22 Feb '09

At 08:45 AM 2/22/2009 -0800, Guido van Rossum wrote: >I've received some enthusiastic emails from someone who wants to >revive restricted mode. He started out with a bunch of patches to the >CPython runtime using ctypes, which he attached to an App Engine bug: > >http://code.google.com/p/googleappengine/issues/detail?id=671 > >Based on his code (the file secure.py is all you need, included in >secure.tar.gz) it seems he believes the only security leaks are >__subclasses__, gi_frame and gi_code. (I have since convinced him that >if we add "restricted" guards to these attributes, he doesn't need the >functions added to sys.) > >I don't recall the exploits that Samuele once posted that caused the >death of rexec.py -- does anyone recall, or have a pointer to the >threads? Just a question, but, if you just need a pure-python restricted environment for App Engine, why not just use the RestrictedPython package (i.e., http://pypi.python.org/pypi/RestrictedPython )?

2 1

Re: [Python-Dev] .pythonrc.py in man page
by Guido van Rossum 22 Feb '09

22 Feb '09

On Sun, Feb 22, 2009 at 5:58 PM, Mitchell L Model <MLMLists(a)comcast.net> wrote: > The python man page, dated 2005 even in 3.1, has this curious entry: > > ~/.pythonrc.py > User-specific initialization file loaded by the user module; > not > used by default or by most applications. > > 1. I couldn't figure out what the user module is. user.py. > 2. I couldn't figure out what "not used by default or by most applications" > meant: what would cause it to get loaded when python starts up? how would an > application load it even if the user's environment didn't cause it to get > loaded? The docstring in user.py explains this. > 3. Why would this file exist if the environment variable PYTHONSTARTUP can > specify a file to be loaded at startup? PYTHONSTARTUP is only used in interactive sessions. > Perhaps this entry in the man page is obsolete and should be removed? Not at all. -- --Guido van Rossum (home page: http://www.python.org/~guido/)

2 2

.pythonrc.py in man page
by Mitchell L Model 22 Feb '09

22 Feb '09

The python man page, dated 2005 even in 3.1, has this curious entry: ~/.pythonrc.py User-specific initialization file loaded by the user module; not used by default or by most applications. 1. I couldn't figure out what the user module is. 2. I couldn't figure out what "not used by default or by most applications" meant: what would cause it to get loaded when python starts up? how would an application load it even if the user's environment didn't cause it to get loaded? 3. Why would this file exist if the environment variable PYTHONSTARTUP can specify a file to be loaded at startup? Perhaps this entry in the man page is obsolete and should be removed?

1 0

Tracker archeology
by Daniel (ajax) Diniz 22 Feb '09

22 Feb '09

Hi all, For the past two days I've been doing some housekeeping *cough*spamming*cough* on the tracker, mostly on ancient and/or easy bugs. So far, ten bugs have been closed (thanks Antoine, Barry, Benjamin, Guilherme, Martin and Raymond). I nominated some other bugs (below) for closing and added a few simple patches, with a couple more pending feedback. If anyone is interested in being added as nosy for any category of bugs, let me know and I'll do that as I scan the tracker. Iff this kind of Bug-Day-ish work is desirable, doesn't disrupt real work and people agree the workflow would be better, I'd like to have developer rights in the tracker, as per Antoine's suggestion. FWIW, I have no problem with the current situation. Talking about Bug Days, I see lots of easy bugs, some with outdated patches. Is there any plan of doing a Bug Day around PyCon time? Best regards, Daniel Bugs nominated for express closing: http://bugs.python.org/issue1103926 email.base64MIME.header_encode vs RFC 1522 http://bugs.python.org/issue727898 Support for sending multipart form data http://bugs.python.org/issue713169 test_pty fails on HP-UX and AIX when run after test_openpty http://bugs.python.org/issue816059 popen2 work, fixes bugs 768649 and 761888 http://bugs.python.org/issue1911 webbrowser.open firefox 3 issues http://bugs.python.org/issue1170065 HTTPResponse.getheaders() returns lowercased header names http://bugs.python.org/issue1175686 add "reload" function http://bugs.python.org/issue779191 BasicModuleLoader behaviour in Python 2.3c2 http://bugs.python.org/issue1327971 HTTPResponse instance has no attribute 'fileno'

22 70

Seeming unintended difference between list comprehensions and generator expressions...
by Josiah Carlson 22 Feb '09

22 Feb '09

Recently I found the need to generate some constants inside a class body. What I discovered was a bit unintuitive, and may not be intended... In 2.5 and 2.6: >>> class foo: ... x = {} ... x.update((i, x.get(i, None)) for i in xrange(10)) ... Traceback (most recent call last): File "<stdin>", line 1, in <module> File "<stdin>", line 3, in foo File "<stdin>", line 3, in <genexpr> NameError: global name 'x' is not defined >>> class foo: ... x = {} ... x.update([(i, x.get(i, None)) for i in xrange(10)]) ... >>> In 3.0: >>> class foo(): ... x = {} ... x.update((i, x.get(i, None)) for i in range(10)) ... Traceback (most recent call last): File "<stdin>", line 1, in <module> File "<stdin>", line 3, in foo File "<stdin>", line 3, in <genexpr> NameError: global name 'x' is not defined >>> class foo(): ... x = {} ... x.update([(i, x.get(i, None)) for i in range(10)]) ... Traceback (most recent call last): File "<stdin>", line 1, in <module> File "<stdin>", line 3, in foo File "<stdin>", line 3, in <listcomp> NameError: global name 'x' is not defined >>> The behavior of 3.0 WRT list comprehensions behaving the same way as generator expressions is expected, but why generator expressions (generally) don't keep a reference to the class scope during execution seems to be unintended. - Josiah

3 4

code.interact() locals + globals?
by Rocky Bernstein 21 Feb '09

21 Feb '09

I notice code.interact() in Python 2.6 has a parameter for locals but not globals. Should it? Ultimately, *exec* is used underneath so I don't see a technical reason why it couldn't add a global parameter. Also, although one could pass in a dictionary that is the merger or update() of locals() and globals(), this has a couple of downsides. First, if the intention is to allow update of local and global variables, combining the two into a single dictionary wreaks havoc. Even if one doesn't care about this, when the underlying *exec* is performed it will see different and wrong values for the functions locals() and globals() among other problems of this kind.

2 2