traverseda
/
cpython
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

PyDict_GetItem() returns a borrowed reference. 

There are probably a number of places that are open to attacks
such as the following one, in bltinmodule.c:min_max().
This commit is contained in:
Armin Rigo 2007-09-05 07:51:21 +00:00
parent 4c1cb7ea8e
commit 362bb51503
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
Lib/test/crashers/borrowed_ref_3.py Normal file
View File

@ -0,0 +1,14 @@
"""
PyDict_GetItem() returns a borrowed reference.
There are probably a number of places that are open to attacks
such as the following one, in bltinmodule.c:min_max().
"""
class KeyFunc(object):
def __call__(self, n):
del d['key']
return 1
d = {'key': KeyFunc()}
min(range(10), **d)