Issue1058
Created on 2008-06-15.03:36:56 by pjenvey, last changed 2008-11-23.06:32:09 by pjenvey.
|
| msg3288 (view) |
Author: Philip Jenvey (pjenvey) |
Date: 2008-06-15.03:36:56 |
|
object.__set/delattr__ allow modification of built in types, this is
known as the Carlo Verre hack:
Jython 2.3a0+ (trunk:4630:4631M, Jun 14 2008, 20:07:38)
[Java HotSpot(TM) Client VM (Apple Inc.)] on java1.5.0_13
Type "help", "copyright", "credits" or "license" for more information.
>>> object.__setattr__(str, 'lower', str.upper)
>>> 'dammit Carlo!'.lower()
'DAMMIT CARLO!'
See CPython's typeobject.c:hackfix for how they prevent this
This prevents test_descr.carloverre from passing
|
| msg3541 (view) |
Author: Jim Baker (zyasoft) |
Date: 2008-09-13.22:21:29 |
|
__setattr__/__delattr__ should test for a tag interface on derived types
such as a hypothetical PyDerived
|
| msg3563 (view) |
Author: Jim Baker (zyasoft) |
Date: 2008-09-14.00:40:14 |
|
As lsoto pointed out on IRC, we already have a builtin flag on the type.
|
| msg3833 (view) |
Author: Philip Jenvey (pjenvey) |
Date: 2008-11-23.06:32:08 |
|
fixed in r5611
|
|
| Date |
User |
Action |
Args |
| 2008-11-23 06:32:09 | pjenvey | set | status: open -> closed
resolution: fixed
messages:
+ msg3833 |
| 2008-11-23 05:13:24 | pjenvey | set | assignee: pjenvey |
| 2008-09-14 00:40:14 | zyasoft | set | messages:
+ msg3563 |
| 2008-09-13 22:21:29 | zyasoft | set | priority: urgent -> normal
nosy:
+ zyasoft
messages:
+ msg3541 |
| 2008-06-15 03:36:56 | pjenvey | create | |
|
