[Zope-Coders] Zope 2.5 instability problems

[Martijn Faassen]

Chris McDonough wrote:
> I would make sure that this is the case in all of those modules before
> trying it, because I *think* I saw a case where the
> ZOPE_SECURITY_POLICY envvar was not respected and the C stuff was used
> regardless.

Hm, I took a look and I thought it was, but I'll check again. Of course it's
possible ZOPE_SECURITY_POLICY is checked and due to a bug it uses the C
stuff anyway, but ..

Just checked again, ZOPE_SECURITY_POLICY should work unless there's some bug
I overlooked. It's checked in all the modules you listed.

The absence of crashes in my tests is also an indication. :)

Note that it's still possible the bug is actually an interaction bug, say
between ComputedAttribute or Acquisition, both used rather a lot in 
ParsedXML and the C security, instead of a security bug by itself.

Weird is that *large* XML documents seem to trigger the problem sooner 
than small ones...

Regards,

Martijn