Does This Scare You?

Jon Ribbens jon+usenet at unequivocal.eu
Mon Aug 22 06:33:34 EDT 2016


On 2016-08-22, Steve D'Aprano <steve+python at pearwood.info> wrote:
> On Mon, 22 Aug 2016 10:38 am, eryk sun wrote:
>> To me it's scary that this check misses cases because it's trying to
>> be cross-platform instead of simply relying on GetFullPathName to do
>> the work. For example, it misses at least the following cases:
>
> Instead of shaking in your boots over a simple bug in a non-critical
> library, how about reporting these cases on the bug tracker with an
> explanation of the problem?

That seems a rather unnecessarily harsh response.
Also, it's not "non-critical", this is a security bug.



More information about the Python-list mailing list