Menu
▾
▴
[Tcl-bugs] [ tcl-Bugs-1999119 ] Safe base does not handle the new TM module mechanism
|
From: SourceForge.net <no...@so...> - 2008-06-25 17:55:32
|
Bugs item #1999119, was opened at 2008-06-20 13:32 Message generated for change (Comment added) made by andreas_kupries You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=110894&aid=1999119&group_id=10894 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: 33. Safe Base Group: current: 8.5.2 >Status: Closed >Resolution: Fixed Priority: 7 Private: No Submitted By: Nicolas Castagne (nicolascastagne) Assigned to: Andreas Kupries (andreas_kupries) Summary: Safe base does not handle the new TM module mechanism Initial Comment: Tcl Modules (TM, see TIP 189, http://tip.tcl.tk/189) cannot be required from a safe interp. EG: % package require math::bigfloat 2.0.1 % ::safe::interpCreate interp0 % interp eval interp0 "package require math::bigfloat" can't find package math::bigfloat % interp eval interp0 "package require math::linearalgebra" can't find package math::linearalgebra Since is a problem, since many of the important tcllib package are now provided through the TM mechanism. The old versions of those packages are correctly loaded in the safe interp... but they are old versions ! According to Andreas Kupries, on the active tcl mail list: "The code for the 'safe base' was likely not updated to handle searching for TMs... It may also be that the package unknown handler doing the search for TMs is not installed in safe interpreters. I would have to check the init.tcl file doing that part of the setup." Also : "Remember, a big part of the 'package' command, the search for packages, is implemented in Tcl and plugged into the main command via 'package unkown'. The relevant pieces of the core are in 'init.tcl', which sets up the plugging, 'package.tcl' handling the general package mechanism, and 'tm.tcl' for the Tcl Modules." ---------------------------------------------------------------------- >Comment By: Andreas Kupries (andreas_kupries) Date: 2008-06-25 10:55 Message: Logged In: YES user_id=75003 Originator: NO Committed to both head and 8.5 branch, test suite updated for the changes (the latter primarily dgp). Regarding 'locating of the package ought to be done in the master', that would have required a larger redesign of the safe base I think. The handling of the virtual to real path translation would change, and each 'package require' by the slave would have to reconfigure the package management in the master if the set of search paths is restricted, i.e. the slave not allowed to see all packages, only some, and/or in some specific corner of the fs just for them. For that having the code doing the locatingi n the slave and configured for the restrictions is much easier than having to switch the master around. IMHO. ---------------------------------------------------------------------- Comment By: Andreas Kupries (andreas_kupries) Date: 2008-06-25 08:57 Message: Logged In: YES user_id=75003 Originator: NO Patch attached. File Added: tm-safe-base.patch ---------------------------------------------------------------------- Comment By: Don Porter (dgp) Date: 2008-06-25 07:47 Message: Logged In: YES user_id=80530 Originator: NO ok, not the trivial fix I was expecting. Still important, but I won't block 8.5.3 for it. ---------------------------------------------------------------------- Comment By: Donal K. Fellows (dkf) Date: 2008-06-25 04:36 Message: Logged In: YES user_id=79902 Originator: NO Arguably the locating of the package ought to be done in the master. ---------------------------------------------------------------------- Comment By: Andreas Kupries (andreas_kupries) Date: 2008-06-24 11:17 Message: Logged In: YES user_id=75003 Originator: NO First notes, collected during first investigative sweep. - The tcl::tm::UnknownHandler is not activated for safe interps (init.tcl, line 157ff). - Activation of the tcl::tm::UnknownHandler shows that it uses a series commands deemed unsafe (file normalize, file exists, glob). (**) - The problems with the first two are readily fixed, simply do not use them in a safe interp. Not sure if that is without repercussions, especially with regard to the normalize. - Usage of 'glob' however is essential. In the regular package mechanism not having it only kills the search in subdirectories of the auto_path. We can still directly source pkgIndex.tcl in directories, and catch problems. For Tcl Modules we do not have a fixed name. We have to search, i.e. glob. to fix this the safe base has to be extended with a 'safe glob' command, i.e. a restricted form of glob which can look only at the paths registered with the safe base. Or something like that. (**) Used proc ::log {args} { puts $args } safe::setLogCmd ::log to get debugging information out of the safe base. ---------------------------------------------------------------------- Comment By: Andreas Kupries (andreas_kupries) Date: 2008-06-24 09:22 Message: Logged In: YES user_id=75003 Originator: NO For when is the release of 8.5.3 planned ? ---------------------------------------------------------------------- Comment By: Don Porter (dgp) Date: 2008-06-24 07:29 Message: Logged In: YES user_id=80530 Originator: NO I think it would be good to get this fixed for Tcl 8.5.3. ---------------------------------------------------------------------- Comment By: Jeffrey Hobbs (hobbs) Date: 2008-06-20 14:13 Message: Logged In: YES user_id=72656 Originator: NO Would need backporting as well. ---------------------------------------------------------------------- Comment By: Nicolas Castagne (nicolascastagne) Date: 2008-06-20 13:35 Message: Logged In: YES user_id=1258423 Originator: YES See also discussion on comp.lang.tcl http://groups.google.com/group/comp.lang.tcl/browse_thread/thread/3e15e20b001e6ecf ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=110894&aid=1999119&group_id=10894 |