• Guido van Rossum's avatar
    Backport to 2.2.x: · 6ad0a79c
    Guido van Rossum yazdı
    SF bug 533625 (Armin Rigo). rexec: potential security hole
    
    If a rexec instance allows writing in the current directory (a common
    thing to do), there's a way to execute bogus bytecode.  Fix this by
    not allowing imports from .pyc files (in a way that allows a site to
    configure things so that .pyc files *are* allowed, if writing is not
    allowed).
    6ad0a79c
librexec.tex 11.1 KB