[Python-checkins] python/dist/src/Misc NEWS,1.337.2.4.2.61,1.337.2.4.2.62

[gvanrossum@users.sourceforge.net]

Update of /cvsroot/python/python/dist/src/Misc
In directory sc8-pr-cvs1:/tmp/cvs-serv6993

Modified Files:
      Tag: release22-maint
	NEWS 
Log Message:
Backport of rev 2.199 from trunk.

PyObject_Generic{Get,Set}Attr:

Don't access tp_descr_{get,set} of a descriptor without checking the
flag bits of the descriptor's type.  While we know that the main type
(the type of the object whose attribute is being accessed) has all the
right flag bits (or else PyObject_Generic{Get,Set}Attr wouldn't be
called), we don't know that for its class attributes!


Index: NEWS
===================================================================
RCS file: /cvsroot/python/python/dist/src/Misc/NEWS,v
retrieving revision 1.337.2.4.2.61
retrieving revision 1.337.2.4.2.62
diff -C2 -d -r1.337.2.4.2.61 -r1.337.2.4.2.62
*** NEWS	13 Feb 2003 17:06:02 -0000	1.337.2.4.2.61
--- NEWS	19 Feb 2003 03:52:47 -0000	1.337.2.4.2.62
***************
*** 3,6 ****
--- 3,11 ----
  ============================
  
+ - Fixed two places in PyObject_Generic{Get,Set}Attr() where the
+   tp_descr_{get,set} slot of a descriptor's type was accessed without
+   checking tp_flags whether those slots actually exist.  This could
+   cause segfaults in Zope.
+ 
  - The imp module now has ways to acquire and release the "import
    lock": imp.acquire_lock() and imp.release_lock().  Note: this is a