Minimal patch to secure the Python interpreter

Objects/genobject.c

 /* Generator object implementation */
 
 #include "Python.h"
 #include "frameobject.h"
 #include "genobject.h"
 #include "ceval.h"
 #include "structmember.h"
 #include "opcode.h"
 
 static int
@@ skipping 294 matching lines @@
 PyDoc_STRVAR(gen__name__doc__,
 "Return the name of the generator's associated code object.");
 
 static PyGetSetDef gen_getsetlist[] = {
 {"__name__", (getter)gen_get_name, NULL, NULL, gen__name__doc__},
 {NULL}
 };
 
 
 static PyMemberDef gen_memberlist[] = {
-  {"gi_frame",  T_OBJECT, offsetof(PyGenObject, gi_frame),  RO},
-  {"gi_running",  T_INT, offsetof(PyGenObject, gi_running),  RO},
- {"gi_code", T_OBJECT, offsetof(PyGenObject, gi_code),  RO},
+  {"gi_frame",  T_OBJECT, offsetof(PyGenObject, gi_frame),
+  RO|RESTRICTED},

[GvR, 2009/02/25 17:42:41]

Given the restrictions on frames, do you still need this? 

[asktav, 2009/02/25 21:00:57]

Good point. But I'd like to keep this restriction in there, just in case... 

+  {"gi_running",  T_INT, offsetof(PyGenObject, gi_running), RO},
+  {"gi_code", T_OBJECT, offsetof(PyGenObject, gi_code),
+   RO|RESTRICTED},

[GvR, 2009/02/25 17:42:41]

Again, why do you restrict the code object? (I guess I am arguing for lifting the restriction on func_code/__code__ too. :-) 

[asktav, 2009/02/25 21:00:57]

code_object.co_consts 

 {NULL} /* Sentinel */
 };
 
 static PyMethodDef gen_methods[] = {
 {"send",(PyCFunction)gen_send, METH_O, send_doc},
 {"throw",(PyCFunction)gen_throw, METH_VARARGS, throw_doc},
 {"close",(PyCFunction)gen_close, METH_NOARGS, close_doc},
 {NULL, NULL} /* Sentinel */
 };
 
@@ skipping 77 matching lines @@
 /* Any block type besides a loop requires cleanup. */
 i = f->f_iblock;
 while (--i >= 0) {
 if (f->f_blockstack[i].b_type != SETUP_LOOP)
 return 1;
 }
 
 /* No blocks except loops, it's safe to skip finalization. */
 return 0;
 }