| commit | 337841dac7f1936c78bacf60c88e085e7ca6231d | [log] [tgz] |
|---|---|---|
| author | Armin Rigo <arigo@tunes.org> | Thu Sep 06 09:30:38 2007 +0000 |
| committer | Armin Rigo <arigo@tunes.org> | Thu Sep 06 09:30:38 2007 +0000 |
| tree | f7ece2f347d2d14316f47b7deb335ae184395ace | |
| parent | bddc3416f8ff0b1436e219aa8281ccad845d81f6 [diff] |
PyDict_GetItem() returns a borrowed reference. This attack is against ceval.c:IMPORT_NAME, which calls an object (__builtin__.__import__) without holding a reference to it.