@@ -2155,22 +2155,22 @@ Changes to Python's build process and to the C API include:
2155
2155
:c:func: `!PyOS_ascii_strtod ` and :c:func: `!PyOS_ascii_atof ` functions
2156
2156
are now deprecated.
2157
2157
2158
- * New function: :c:func: `PySys_SetArgvEx ` sets the value of
2158
+ * New function: :c:func: `! PySys_SetArgvEx ` sets the value of
2159
2159
``sys.argv `` and can optionally update ``sys.path `` to include the
2160
2160
directory containing the script named by ``sys.argv[0] `` depending
2161
2161
on the value of an *updatepath * parameter.
2162
2162
2163
2163
This function was added to close a security hole for applications
2164
- that embed Python. The old function, :c:func: `PySys_SetArgv `, would
2164
+ that embed Python. The old function, :c:func: `! PySys_SetArgv `, would
2165
2165
always update ``sys.path ``, and sometimes it would add the current
2166
2166
directory. This meant that, if you ran an application embedding
2167
2167
Python in a directory controlled by someone else, attackers could
2168
2168
put a Trojan-horse module in the directory (say, a file named
2169
2169
:file: `os.py `) that your application would then import and run.
2170
2170
2171
2171
If you maintain a C/C++ application that embeds Python, check
2172
- whether you're calling :c:func: `PySys_SetArgv ` and carefully consider
2173
- whether the application should be using :c:func: `PySys_SetArgvEx `
2172
+ whether you're calling :c:func: `! PySys_SetArgv ` and carefully consider
2173
+ whether the application should be using :c:func: `! PySys_SetArgvEx `
2174
2174
with *updatepath * set to false.
2175
2175
2176
2176
Security issue reported as `CVE-2008-5983
@@ -2545,11 +2545,11 @@ For C extensions:
2545
2545
2546
2546
For applications that embed Python:
2547
2547
2548
- * The :c:func: `PySys_SetArgvEx ` function was added, letting
2548
+ * The :c:func: `! PySys_SetArgvEx ` function was added, letting
2549
2549
applications close a security hole when the existing
2550
- :c:func: `PySys_SetArgv ` function was used. Check whether you're
2551
- calling :c:func: `PySys_SetArgv ` and carefully consider whether the
2552
- application should be using :c:func: `PySys_SetArgvEx ` with
2550
+ :c:func: `! PySys_SetArgv ` function was used. Check whether you're
2551
+ calling :c:func: `! PySys_SetArgv ` and carefully consider whether the
2552
+ application should be using :c:func: `! PySys_SetArgvEx ` with
2553
2553
*updatepath * set to false.
2554
2554
2555
2555
.. ======================================================================
0 commit comments