Minimal patch to secure the Python interpreter

Objects/typeobject.c

 /* Type object implementation */
 
 #include "Python.h"
 #include "structmember.h"
 
 #include <ctype.h>
 
 static PyMemberDef type_members[] = {
 {"__basicsize__", T_INT, offsetof(PyTypeObject,tp_basicsize),READONLY},
 {"__itemsize__", T_INT, offsetof(PyTypeObject, tp_itemsize), READONLY},
@@ skipping 2230 matching lines @@
 */
 PyObject_Free((char *)type->tp_doc);
 Py_XDECREF(et->ht_name);
 Py_XDECREF(et->ht_slots);
 type->ob_type->tp_free((PyObject *)type);
 }
 
 static PyObject *
 type_subclasses(PyTypeObject *type, PyObject *args_ignored)
 {
+

[Martin v. Löwis, 2009/02/23 22:57:36]

The only issue I see here is that this is not C89 (i.e. mixes code and declarations); that's easily corrected, of course. 

+if (PyEval_GetRestricted()) {
+PyErr_SetString(PyExc_RuntimeError,
+"__subclasses__ is not accessible in restricted mode.");
+return NULL;
+}
+
 PyObject *list, *raw, *ref;
 Py_ssize_t i, n;
 
 list = PyList_New(0);
 if (list == NULL)
 return NULL;
 raw = type->tp_subclasses;
 if (raw == NULL)
 return list;
 assert(PyList_Check(raw));
@@ skipping 3735 matching lines @@
 0, /* tp_base */
 0, /* tp_dict */
 super_descr_get, /* tp_descr_get */
 0, /* tp_descr_set */
 0, /* tp_dictoffset */
 super_init, /* tp_init */
 PyType_GenericAlloc, /* tp_alloc */
 PyType_GenericNew, /* tp_new */
 PyObject_GC_Del, /* tp_free */
 };