Minimal patch to secure the Python interpreter

Objects/typeobject.c

Index: Objects/typeobject.c 
diff --git a/Objects/typeobject.c b/Objects/typeobject.c 
index 4c032e77e459b1061ebcb0b29544602ab916e9e4..ee5cc36ad262fe91a8ddfd8da4d406e99d8bd1f9 100644 
--- a/Objects/typeobject.c 
+++ b/Objects/typeobject.c 
@@ -2248,6 +2248,13 @@ type_dealloc(PyTypeObject *type) 
 static PyObject * 
 type_subclasses(PyTypeObject *type, PyObject *args_ignored) 
 { 
+ 

[Martin v. Löwis, 2009/02/23 22:57:36]

The only issue I see here is that this is not C89 (i.e. mixes code and declarations); that's easily corrected, of course. 

+	if (PyEval_GetRestricted()) { 
+	PyErr_SetString(PyExc_RuntimeError, 
+	"__subclasses__ is not accessible in restricted mode."); 
+	return NULL; 
+	} 
+ 
	PyObject *list, *raw, *ref; 
	Py_ssize_t i, n;