[Python-checkins] r51667 - python/branches/bcannon-objcap/securing_python.txt

[brett.cannon]

Author: brett.cannon
Date: Thu Aug 31 20:40:52 2006
New Revision: 51667

Modified:
   python/branches/bcannon-objcap/securing_python.txt
Log:
Rework how to remove initializer of 'file' to make more flexible and keep
subclasses of 'file' useful with minimal changes to them.


Modified: python/branches/bcannon-objcap/securing_python.txt
==============================================================================
--- python/branches/bcannon-objcap/securing_python.txt	(original)
+++ python/branches/bcannon-objcap/securing_python.txt	Thu Aug 31 20:40:52 2006
@@ -7,11 +7,13 @@
 + Remove object.__subclasses__ (`Mutable Shared State`_) [done]
 + Dangerous constructors (`Constructors`_)
     - file
-        * Create PyFile_UnsafeOpen() [done]
+        * Create PyFile_Init() from file_init()
         * Switch current C-level uses of 'file' constructor to
-          PyFile_UnsafeOpen(). [done]
-            + built-in open() [done]
-            + bz2 module [done]
+          use PyFile_Type.tp_new() and PyFile_Init().
+            + built-in open()
+            + bz2 module
+        * Expose PyFile_Init() in objcap module so that file
+          subclasses are actually worth something.
         * Create PyFile_Safe*() version of C API that goes through
           open() built-in.
             + Convert C strings to Python objects and do a direct
@@ -22,7 +24,6 @@
               makes less of a performance-critical operation.
             + Might need to add some C code for easily accessing
               built-in objects.
-        * How to handle creating subclasses if open() only way?
     - code
     - ??? <go through Objects/*>
 + Sandboxed versions of built-ins (`Sanitizing Built-In Types`_)