[issue11829] inspect.getattr_static code execution with meta-metaclasses

[Andreas Stührk]

New submission from Andreas Stührk <andy-python at hammerhartes.de>:

The commit for issue #11133 omitted a part of the patch that checked whether the __dict__ attribute of metaclasses are shadowed. That makes it possible to trigger code execution in the case of metaclasses that have metaclasses.

Attached is a patch with a test and a fix.

----------
components: Library (Lib)
files: getattr_static_metaclasses.patch
keywords: patch
messages: 133549
nosy: Trundle, michael.foord
priority: normal
severity: normal
status: open
title: inspect.getattr_static code execution with meta-metaclasses
type: behavior
versions: Python 3.2, Python 3.3
Added file: http://bugs.python.org/file21621/getattr_static_metaclasses.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue11829>
_______________________________________