From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:42689) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dYG32-0007e2-2O for qemu-devel@nongnu.org; Thu, 20 Jul 2017 14:19:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dYG2y-0006lK-Uw for qemu-devel@nongnu.org; Thu, 20 Jul 2017 14:19:40 -0400 Received: from mx1.redhat.com ([209.132.183.28]:42732) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dYG2y-0006k0-Og for qemu-devel@nongnu.org; Thu, 20 Jul 2017 14:19:36 -0400 Received: from smtp.corp.redhat.com (int-mx06.intmail.prod.int.phx2.redhat.com [10.5.11.16]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 77EF9C0467C4 for ; Thu, 20 Jul 2017 18:19:35 +0000 (UTC) Date: Thu, 20 Jul 2017 15:19:24 -0300 From: Eduardo Habkost Message-ID: <20170720181924.GS2757@localhost.localdomain> References: <20170720162815.19802-1-ldoktor@redhat.com> <20170720162815.19802-3-ldoktor@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20170720162815.19802-3-ldoktor@redhat.com> Content-Transfer-Encoding: quoted-printable Subject: Re: [Qemu-devel] [PATCH 02/11] qemu.py: Avoid dangerous arguments List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: =?utf-8?B?THVrw6HFoQ==?= Doktor Cc: apahim@redhat.com, qemu-devel@nongnu.org, famz@redhat.com, armbru@redhat.com, mreitz@redhat.com On Thu, Jul 20, 2017 at 06:28:06PM +0200, Luk=C3=A1=C5=A1 Doktor wrote: > The list object is mutable in python and potentially might modify other > object's arguments when used as default argument. Reproducer: >=20 > >>> vm1 =3D QEMUMachine("qemu") > >>> vm2 =3D QEMUMachine("qemu") > >>> vm1._wrapper.append("foo") > >>> print vm2._wrapper > ['foo'] >=20 > In this case the `args` is actually copied so it would be safe to keep > it, but it's not a good practice to keep it. >=20 > Signed-off-by: Luk=C3=A1=C5=A1 Doktor Reviewed-by: Eduardo Habkost --=20 Eduardo