[issue11829] inspect.getattr_static code execution with meta-metaclasses

Roundup Robot added the comment: New changeset 8f33758df19a by Michael Foord in branch '3.2': Metaclasses with metaclasses with a __dict__ descriptor can no longer trigger code execution with inspect.getattr_static. http://hg.python.org/cpython/rev/8f33758df19a -- nosy: +python-dev res

[issue11829] inspect.getattr_static code execution with meta-metaclasses

Andreas Stührk added the comment: As the test demonstrates, it's still possible to trigger a dynamic lookup without the patch, hence I think this is still needed and valid, yes. I updated the patch to make it reflect the latest committed changes. -- Added file: http://bugs.python.org/

[issue11829] inspect.getattr_static code execution with meta-metaclasses

Michael Foord added the comment: Andreas, is this still needed and valid? -- assignee: -> michael.foord ___ Python tracker ___ ___ P

[issue11829] inspect.getattr_static code execution with meta-metaclasses

Changes by Antoine Pitrou : -- nosy: +ncoghlan stage: -> patch review ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubs

[issue11829] inspect.getattr_static code execution with meta-metaclasses

New submission from Andreas Stührk : The commit for issue #11133 omitted a part of the patch that checked whether the __dict__ attribute of metaclasses are shadowed. That makes it possible to trigger code execution in the case of metaclasses that have metaclasses. Attached is a patch with a te