[Python-checkins] python/dist/src/Lib rexec.py,1.34.10.4,1.34.10.5 Bastion.py,1.6,1.6.24.1
gvanrossum@users.sourceforge.net
gvanrossum@users.sourceforge.net
Tue, 07 Jan 2003 15:01:30 -0800
Update of /cvsroot/python/python/dist/src/Lib
In directory sc8-pr-cvs1:/tmp/cvs-serv21744
Modified Files:
Tag: release22-maint
rexec.py Bastion.py
Log Message:
Sabotage rexec.py and Bastion.py. These are not secure in Python 2.2
or 2.3.
Index: rexec.py
===================================================================
RCS file: /cvsroot/python/python/dist/src/Lib/rexec.py,v
retrieving revision 1.34.10.4
retrieving revision 1.34.10.5
diff -C2 -d -r1.34.10.4 -r1.34.10.5
*** rexec.py 19 Nov 2002 19:22:25 -0000 1.34.10.4
--- rexec.py 7 Jan 2003 23:01:13 -0000 1.34.10.5
***************
*** 180,183 ****
--- 180,186 ----
"""
+
+ raise RuntimeError, "This code is not secure in Python 2.2 and 2.3"
+
ihooks._Verbose.__init__(self, verbose)
# XXX There's a circular reference here:
Index: Bastion.py
===================================================================
RCS file: /cvsroot/python/python/dist/src/Lib/Bastion.py,v
retrieving revision 1.6
retrieving revision 1.6.24.1
diff -C2 -d -r1.6 -r1.6.24.1
*** Bastion.py 20 Jan 2001 19:54:20 -0000 1.6
--- Bastion.py 7 Jan 2003 23:01:21 -0000 1.6.24.1
***************
*** 98,101 ****
--- 98,103 ----
"""
+ raise RuntimeError, "This code is not secure in Python 2.2 and 2.3"
+
# Note: we define *two* ad-hoc functions here, get1 and get2.
# Both are intended to be called in the same way: get(name).