msg211415 - (view) |
Author: daniel hahler (blueyed) * |
Date: 2014-02-17 13:06 |
posix.unsetenv fails to clear the environment if there's an entry with an empty key.
TEST CASE:
Python 2.7.6 (default, Jan 6 2014, 17:05:19)
[GCC 4.8.1] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import os
>>> os.environ['']='foo'
>>> os.environ.clear()
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/path/to/python/2.7.6/lib/python2.7/os.py", line 499, in clear
unsetenv(key)
OSError: [Errno 22] Invalid argument
I believe that os.environ.clear() via unsetenv should handle empty keys.
|
msg211450 - (view) |
Author: Ned Deily (ned.deily) * |
Date: 2014-02-17 22:23 |
According to the Open Group Base Specification (Issue 7 2013 Issue):
"The setenv() function shall fail if:
[EINVAL]
The envname argument points to an empty string or points to a string containing an '=' character."
So it seems to me that the issue here is that os.environ[''] attempts to allow you to create a environment variable with a null key.
|
msg211451 - (view) |
Author: Ned Deily (ned.deily) * |
Date: 2014-02-17 22:27 |
OTOH, the specification for putenv, which is what is actually used by posixmodule.c, does not contain that requirement.
http://pubs.opengroup.org/onlinepubs/9699919799/functions/putenv.html
http://pubs.opengroup.org/onlinepubs/9699919799/functions/setenv.html
|
msg211508 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2014-02-18 11:53 |
putenv("=value") does nothing: it doesn't create a variable with an empty name. You can test with the attach test_empty_env_var.py script (written for Linux).
Attached reject_empty_env_var.patch patch modifies posix.putenv() to raise a ValueError if the name is empty.
The patch is incomplete, the Windows part should also be modified. But I didn't test yet if Windows supports variables with empty name.
|
msg211509 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2014-02-18 11:53 |
The workaround of this bug is to avoid "os.environ['']=value".
|
msg211612 - (view) |
Author: daniel hahler (blueyed) * |
Date: 2014-02-19 13:21 |
Please note that I have noticed this not because of setting it via `os.environ`, but because a program using `os.environ.clear()` crashed:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1281086
I cannot say how this unusual entry was added to the environment, but it showed up in `env` and therefore it is possible somehow.
|
msg211613 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2014-02-19 13:27 |
"Please note that I have noticed this not because of setting it via `os.environ`, but because a program using `os.environ.clear()` crashed:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1281086"
The bug is not os.environ.clear(), but that os.environ contains an empty string.
It would help to know if the key was set manually by apport, or if it comes from the real environment. The environment looks correct:
https://launchpadlibrarian.net/166517334/ProcEnviron.txt
|
msg211615 - (view) |
Author: daniel hahler (blueyed) * |
Date: 2014-02-19 13:32 |
> It would help to know if the key was set manually by apport, or if it comes from the real environment. The environment looks correct:
It comes from the real environment.
I wanted to use apport, but could not from the current shell, because of this bug.
I had then looked at the output of `env` in this shell, and it contained just "=" (IIRC, but an empty name/key for sure). This was in a tmux shell/pane, which I have closed already.
|
msg211617 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2014-02-19 13:38 |
> It comes from the real environment.
Oh. It looks possible to define an environment variable with an empty key, but not to remove it:
$ env -i =value python -c 'import pprint, os; pprint.pprint(os.environ); del os.environ[""]'
environ({'': 'value'})
Traceback (most recent call last):
File "<string>", line 1, in <module>
File "Lib/os.py", line 662, in __delitem__
self.unsetenv(encodedkey)
OSError: [Errno 22] Invalid argument
|
msg211619 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2014-02-19 13:41 |
By the way, Python allows also to set an environment with a name containing "=", whereas getenv/setenv/unsetenv doesn't.
$ env -i python -c 'import pprint, posix, os; os.environ["a="]="1"; print(os.environ); posix.unsetenv("a=")'
environ({'a=': '1'})
Traceback (most recent call last):
File "<string>", line 1, in <module>
OSError: [Errno 22] Invalid argument
|
msg211622 - (view) |
Author: Serhiy Storchaka (serhiy.storchaka) * |
Date: 2014-02-19 14:39 |
Are there supported platforms on which setenv() is not supported? When we will migrate to setenv(), an argument check will be not needed.
In any case I think we should wrap unsetenv() in os.environ.clear() so that it should try to remove all environment variables even if some calls of unsetenv() fails.
|
msg211624 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2014-02-19 15:06 |
In fact, there is also a clearenv() function which could be used by os.environ.clear().
"The clearenv() function clears the environment of all name-value pairs and sets the value of the external variable environ to NULL."
It looks like supported names depends a lot on the platform and platform version. Extract of Linux manual pages:
setenv:
---
BUGS:
POSIX.1-2001 specifies that if name contains an '=' character, then setenv() should fail with the error EINVAL; however, versions of glibc before 2.3.4 allowed an '=' sign in name.
---
clearenv:
---
CONFORMING TO
Various UNIX variants (DG/UX, HP-UX, QNX, ...). POSIX.9 (bindings for FORTRAN77). POSIX.1-1996 did not accept clearenv() and putenv(3), but changed its mind and scheduled these functions for some later issue of this standard (cf. B.4.6.1). However, POSIX.1-2001 adds only putenv(3), and rejected clearenv().
---
> In any case I think we should wrap unsetenv() in os.environ.clear() so that it should try to remove all environment variables even if some calls of unsetenv() fails.
os.environ.clear() may tries to remove as much keys as possible, but keep keys for which unsetenv raised an error and raise a global error in this case.
|
msg212405 - (view) |
Author: Akira Li (akira) * |
Date: 2014-02-28 05:02 |
Related: issue4926 "putenv() accepts names containing '=', return value of unsetenv() not checked"
`os.environ.clear()` also fails if the environment contains names with `=`:
>>> import os
>>> os.environ['a=b'] = 'c'
>>> os.environ.clear()
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/.../lib/python3.4/_collections_abc.py", line 558, in clear
self.popitem()
File "/.../lib/python3.4/_collections_abc.py", line 551, in popitem
del self[key]
File "/.../lib/python3.4/os.py", line 662, in __delitem__
self.unsetenv(encodedkey)
OSError: [Errno 22] Invalid argument
|
msg400467 - (view) |
Author: Irit Katriel (iritkatriel) * |
Date: 2021-08-28 10:54 |
They keys are checked now, so I think this is resolved. (Tested on windows and Mac).
>>> os.environ[''] = 'X'
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/Users/iritkatriel/src/cpython/Lib/os.py", line 684, in __setitem__
putenv(key, value)
^^^^^^^^^^^^^^^^^^
OSError: [Errno 22] Invalid argument
>>> os.environ['a=b'] = 'c'
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/Users/iritkatriel/src/cpython/Lib/os.py", line 684, in __setitem__
putenv(key, value)
^^^^^^^^^^^^^^^^^^
ValueError: illegal environment variable name
|
msg400609 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2021-08-30 14:22 |
The following command still fails on the Python main branch on Linux:
---
$ env -i =value ./python -c 'import pprint, os; pprint.pprint(os.environ); del os.environ[""]'
environ({'': 'value', 'LC_CTYPE': 'C.UTF-8'})
Traceback (most recent call last):
File "<string>", line 1, in <module>
File "/home/vstinner/python/main/Lib/os.py", line 689, in __delitem__
unsetenv(encodedkey)
^^^^^^^^^^^^^^^^^^^^
OSError: [Errno 22] Invalid argument
---
'del os.environ[""]' calls unsetenv("") which fails with EINVAL.
Python is a thin wrapper to C functions setenv() and unsetenv(), and raises an exception when a C function fails. It works as expected.
Python exposes the variable with an empty name which is found in the environment variables: again, it works as expected.
I don't see how Python could do better, since the glibc unsetenv() fails with EINVAL if the string is empty. It is even a documented behaviour, see the unsetenv() manual page:
---
ERRORS
EINVAL name is NULL, points to a string of length 0, or contains an '=' character.
---
|
msg400610 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2021-08-30 14:24 |
By the way:
---
The env command from GNU coreutils supports setting the environment variable with an empty name but not unsetting it. That's a bug.
$ env '=wibble' env |grep wibble
=wibble
$ env '=wibble' env -u '' env
env: cannot unset `': Invalid argument
---
https://unix.stackexchange.com/questions/178522/unsetting-environment-variable-with-an-empty-name
|
msg400611 - (view) |
Author: Irit Katriel (iritkatriel) * |
Date: 2021-08-30 14:26 |
I see, so intercepting the assignment is not enough. Reopening.
|
msg400613 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2021-08-30 14:56 |
Attached set_unset_env.c program calls putenv("=hello world") and then unsetenv("").
On my Fedora 34 with glibc-2.33-20.fc34.x86_64, putenv() succeed, but unsetenv() fails.
---
$ gcc set_unset_env.c -g -o set_unset_env && ./set_unset_env
putenv("=hello world") -> hello world
ERROR: unsetenv("") failed: [error 22] Invalid argument
---
By the way, getenv() fails to find an environment variable if its name is empty: I reimplemented getenv() using the 'environ' variable for my test.
|
msg400616 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2021-08-30 15:08 |
For the very specific case of os.environ.clear(), the C function clearenv() could be used if available.
While clearenv() is available in the glibc, it's not a POSIX function.
|
msg401037 - (view) |
Author: Serhiy Storchaka (serhiy.storchaka) * |
Date: 2021-09-04 06:55 |
> For the very specific case of os.environ.clear(), the C function clearenv() could be used if available.
It is bad in any way. The supposed example of using clear():
old_environ = dict(os.environ)
os.environ.clear()
os.environ.update(new_environ)
...
os.environ.clear()
os.environ.update(old_environ)
Even if clear() passed, it will fail on attempt to restore the old environment, with the empty key.
You can have the same issue in a corresponding C code. I think the only way is to report this as a bug in glibc and wait on their reaction.
|
msg401041 - (view) |
Author: STINNER Victor (vstinner) * |
Date: 2021-09-04 11:19 |
POSIX says:
(1) "The setenv() function shall fail if: [EINVAL] The name argument is a null pointer, points to an empty string, or points to a string containing an '=' character."
https://pubs.opengroup.org/onlinepubs/009604499/functions/setenv.html
(2) "The unsetenv() function shall fail if: [EINVAL] The name argument is a null pointer, points to an empty string, or points to a string containing an '=' character."
https://pubs.opengroup.org/onlinepubs/009695399/functions/unsetenv.html
But POSIX doesn't specify which keys are invalid for putenv. It only specifies a single error:
(3) "The putenv() function may fail if: [ENOMEM] Insufficient memory was available."
https://pubs.opengroup.org/onlinepubs/009696899/functions/putenv.html
The GNU libc respects POSIX.
IMO setenv() and unsetenv() are fine. The problem comes from putenv() which is under specified and allows keys which are causing a lot of subtle issues, not only in Python.
|
|
Date |
User |
Action |
Args |
2022-04-11 14:57:58 | admin | set | github: 64857 |
2021-09-04 11:19:31 | vstinner | set | messages:
+ msg401041 |
2021-09-04 06:55:47 | serhiy.storchaka | set | messages:
+ msg401037 |
2021-09-03 23:39:51 | terry.reedy | set | versions:
+ Python 3.11, - Python 2.7, Python 3.3, Python 3.4 |
2021-08-30 15:08:59 | vstinner | set | messages:
+ msg400616 |
2021-08-30 14:56:38 | vstinner | set | files:
+ set_unset_env.c
messages:
+ msg400613 |
2021-08-30 14:26:53 | iritkatriel | set | status: closed -> open resolution: out of date -> messages:
+ msg400611
|
2021-08-30 14:24:00 | vstinner | set | messages:
+ msg400610 |
2021-08-30 14:22:24 | vstinner | set | messages:
+ msg400609 |
2021-08-30 14:15:01 | iritkatriel | set | status: pending -> closed stage: test needed -> resolved |
2021-08-28 10:54:11 | iritkatriel | set | status: open -> pending
nosy:
+ iritkatriel messages:
+ msg400467
resolution: out of date |
2015-10-05 08:15:29 | pefu | set | nosy:
+ pefu
|
2014-02-28 05:02:09 | akira | set | nosy:
+ akira messages:
+ msg212405
|
2014-02-20 03:04:16 | Arfrever | set | nosy:
+ Arfrever
|
2014-02-19 15:06:54 | vstinner | set | messages:
+ msg211624 |
2014-02-19 14:39:24 | serhiy.storchaka | set | messages:
+ msg211622 |
2014-02-19 14:34:56 | serhiy.storchaka | set | messages:
- msg211621 |
2014-02-19 14:34:32 | serhiy.storchaka | set | nosy:
+ serhiy.storchaka messages:
+ msg211621
|
2014-02-19 13:41:49 | vstinner | set | messages:
+ msg211619 |
2014-02-19 13:38:41 | vstinner | set | messages:
+ msg211617 |
2014-02-19 13:32:15 | blueyed | set | messages:
+ msg211615 |
2014-02-19 13:27:28 | vstinner | set | messages:
+ msg211613 |
2014-02-19 13:21:18 | blueyed | set | messages:
+ msg211612 |
2014-02-18 11:53:49 | vstinner | set | messages:
+ msg211509 |
2014-02-18 11:53:10 | vstinner | set | files:
+ reject_empty_env_var.patch keywords:
+ patch |
2014-02-18 11:53:04 | vstinner | set | files:
+ test_empty_env_var.py nosy:
+ vstinner messages:
+ msg211508
|
2014-02-17 22:27:10 | ned.deily | set | messages:
+ msg211451 |
2014-02-17 22:23:17 | ned.deily | set | versions:
+ Python 3.4 nosy:
+ ned.deily
messages:
+ msg211450
type: crash -> stage: test needed |
2014-02-17 13:06:08 | blueyed | create | |