[issue1514420] Missing module code does spurious file search

Christian Theune added the comment: I don't think the security risk exists due to this bug. As Python is searching for various places anyway, an attacker could just symlink one of those places anyway instead of ''. -- nosy: +ctheune ___ Python track

[issue1514420] Missing module code does spurious file search

Changes by Mark Lawrence : -- versions: +Python 2.7, Python 3.1, Python 3.2 -Python 2.6, Python 3.0 ___ Python tracker ___ ___ Pytho

[issue1514420] Missing module code does spurious file search

Changes by Ronald Oussoren : -- nosy: -ronaldoussoren ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http:/

[issue1514420] Missing module code does spurious file search

Zbyszek Szmek added the comment: The bug is certainly not catastrophic, but creates a slight security risk: ln -s /etc/shadow '' some-suid-program -with-error or whatever. -- nosy: +zbysz ___ Python tracker __

[issue1514420] Missing module code does spurious file search

Daniel Diniz added the comment: Confirmed in py3k and trunk. It's also possible to create a file named "", I seem to recall discussion on this. -- nosy: +ajaksu2 stage: -> test needed type: -> behavior versions: +Python 2.6, Python 3.0 -Python 2.5