New submission from Andreas Stührk <andy-pyt...@hammerhartes.de>: The commit for issue #11133 omitted a part of the patch that checked whether the __dict__ attribute of metaclasses are shadowed. That makes it possible to trigger code execution in the case of metaclasses that have metaclasses.
Attached is a patch with a test and a fix. ---------- components: Library (Lib) files: getattr_static_metaclasses.patch keywords: patch messages: 133549 nosy: Trundle, michael.foord priority: normal severity: normal status: open title: inspect.getattr_static code execution with meta-metaclasses type: behavior versions: Python 3.2, Python 3.3 Added file: http://bugs.python.org/file21621/getattr_static_metaclasses.patch _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue11829> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
