[Zope-xml] ParsedXML and Zope 2.5.0

[Martijn Faassen]

Hi there,

That's a known problem in Zope 2.5.0, introduced with Zope 2.5's security
optimizations (cAccessControl). As a temporary fix you can set the
environment variable ZOPE_SECURITY_POLICY to PYTHON; for instance on
Linux I do this before starting Zope:

export ZOPE_SECURITY_POLICY=PYTHON

This disables the new cAccessControl.

We had some issues getting the problem reproduced; today I finally
found out it doesn't occur if you place a ParsedXML object into the
Zope root, but does crash if you put it in a folder somewhere. This
discovery enabled Matt Kromer to come up with this patch to cAccessControl;
when I applied it the crashing behavior disappeared.

If you or anyone else can try it out (it's just an added Py_INCREF
at the right place) then I'd be grateful. :)

Index: cAccessControl.c
===================================================================
RCS file: /cvs-repository/Zope/lib/python/AccessControl/cAccessControl.c,v
retrieving revision 1.13
diff -u -r1.13 cAccessControl.c
--- cAccessControl.c    11 Jan 2002 17:14:27 -0000      1.13
+++ cAccessControl.c    1 Feb 2002 17:27:31 -0000
@@ -1703,6 +1703,7 @@
                Py_DECREF(r);
                r = self->__roles__;
                if (r == NULL) goto err;
+               Py_INCREF(r);
        }
         
        /*|