Nick Coghlan added the comment:

Ah, you're right - I found the example I was thinking of (Richard Jones's 
"Don't do this!" talk), and it was just demonstrating that the except clause 
accepts any expressions producing a tuple or BaseException instance, not that 
we call __iter__ at that point.

And since we do identity checks for the exception type matching (rather than 
equality checks), it looks like all the avenues for arbitrary code execution 
while checking if an exception handler matches a thrown an exception are closed 
off.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue12029>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to