This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

classification
Title: Importing uuid should not try to load libc on Windows
Type: behavior Stage: resolved
Components: Windows Versions: Python 3.6, Python 3.4, Python 3.5, Python 2.7
process
Status: closed Resolution: fixed
Dependencies: Superseder:
Assigned To: steve.dower Nosy List: eryksun, paul.moore, python-dev, steve.dower, tim.golden, zach.ware
Priority: normal Keywords: patch

Created on 2015-07-14 20:24 by steve.dower, last changed 2022-04-11 14:58 by admin. This issue is now closed.

Files
File name Uploaded Description Edit
24634_1.patch steve.dower, 2015-07-14 20:26 review
Messages (10)
msg246740 - (view) Author: Steve Dower (steve.dower) * (Python committer) Date: 2015-07-14 20:24
Lib/uuid.py includes the following code that runs on import:

    import ctypes, ctypes.util

    # The uuid_generate_* routines are provided by libuuid on at least
    # Linux and FreeBSD, and provided by libc on Mac OS X.
    for libname in ['uuid', 'c']:
        try:
            lib = ctypes.CDLL(ctypes.util.find_library(libname))
        except Exception:
            continue
        if hasattr(lib, 'uuid_generate_random'):
            _uuid_generate_random = lib.uuid_generate_random
        if hasattr(lib, 'uuid_generate_time'):
            _uuid_generate_time = lib.uuid_generate_time
            if _uuid_generate_random is not None:
                break  # found everything we were looking for

This code can cause issues on Windows when loading the CRT outside of an activation context (2.7) or in one case crashed Python 3.4 on a server (unfortunately I couldn't get access to the error logs - but I guessed that this section was responsible and turned out it was).

I propose adding a sys.platform check before running this code, to omit it on any platform starting with 'win' (patch to follow). I believe this should apply to all current versions of Python.

It is possible that someone has added their own "uuid.dll" to the DLL search path and is relying on that being found by uuid.py. I consider that unlikely and unsupported, but if people think that's a valid concern I can rework the patch to attempt to load uuid.dll but not the CRT on Windows.
msg246741 - (view) Author: Steve Dower (steve.dower) * (Python committer) Date: 2015-07-14 20:26
Patch is against Python 3.5, but uuid.py is identical in all versions and the change should be applied to all four branches.
msg246742 - (view) Author: Eryk Sun (eryksun) * (Python triager) Date: 2015-07-14 23:08
> This code can cause issues on Windows

What's the issue or issues here? For 2.7, Windows won't be able to find msvcr90.dll without an activation context, but that's just an ERROR_MOD_NOT_FOUND OS error. It should be ignored by the try/except block. For 3.4, it shouldn't be using SxS for msvcr100.dll, so the server in question must have an unusual configuration. Still, the OSError that gets raised should be ignored. 

3.5 built with VC 14 has a separate issue related to this. Due to changes from issue 23606, find_msvcrt now returns None. But the TypeError raised by CDLL(None) should be ignored here all the same. 

BTW, in Windows 10 I'm still able to reference CRT functions by name using CDLL('ucrtbase'). Are you sure the ultimate plan is to remove the named exports?
msg246744 - (view) Author: Steve Dower (steve.dower) * (Python committer) Date: 2015-07-14 23:22
> For 2.7, Windows won't be able to find msvcr90.dll without an activation context, but that's just an ERROR_MOD_NOT_FOUND OS error.

Actually, it finds the DLL fine and the DLL terminates the entire process when it fails to detect an activation context. There's #24429 on this, which I forgot to link to (note that this bug is related to that one, but is much smaller in scope).

> For 3.4, it shouldn't be using SxS for msvcr100.dll, so the server in question must have an unusual configuration. Still, the OSError that gets raised should be ignored. 

Unfortunately I can't get hold of the error. It's almost certainly a strange configuration, but it was a commodity, publicly available server where the configuration is completely outside of the user's control. If we can avoid crashing when importing stdlib modules regardless of configuration, we should.

> 3.5 built with VC 14 has a separate issue related to this. Due to changes from issue 23606, find_msvcrt now returns None. But the TypeError raised by CDLL(None) should be ignored here all the same. 

And it will be ignored, but when we know it's going to raise, why bother trying to load the library?

> BTW, in Windows 10 I'm still able to reference CRT functions by name using CDLL('ucrtbase'). Are you sure the ultimate plan is to remove the named exports?

It looks like on Windows 10 the CRT has switched to the transparent API schema. My python35.dll does not directly reference ucrtbase, and so it's still intended to be non-public API, and I still want to discourage its use because the chance of applications on different Windows versions is too high.
msg246747 - (view) Author: Eryk Sun (eryksun) * (Python triager) Date: 2015-07-15 00:08
> Actually, it finds the DLL fine and the DLL terminates the entire 
> process when it fails to detect an activation context. 

OK, in that case it finds msvcr90.dll via PATH. I was only thinking of the DLL being installed in a subdirectory of the system WinSxS directory. I still think in this case it would be better to let extension modules get access to the activation context that Python saves and subsequently activates when loading extension modules. ctypes could activate this context before calling LoadLibrary.
msg246748 - (view) Author: Steve Dower (steve.dower) * (Python committer) Date: 2015-07-15 00:17
> ctypes could activate this context before calling LoadLibrary.

That would break anyone else who's manually managing their own activation context around ctypes. At best we could expose functions to enable Python's activation context (which I'm willing to help review and merge a patch for on the other issue), but calling them while importing uuid when we know that we should just skip that part of the module's logic is silly.
msg246753 - (view) Author: Eryk Sun (eryksun) * (Python triager) Date: 2015-07-15 03:17
> That would break anyone else who's manually managing their own 
> activation context around ctypes. 

Since this can't be made to work automatically, I prefer your suggestion to continue checking for uuid.dll. You could just do something like the following:

    libnames = ['uuid']
    if sys.platform != 'win32':
        libnames.append('c')

    for libname in libnames:
        ...
msg248280 - (view) Author: Roundup Robot (python-dev) (Python triager) Date: 2015-08-08 16:14
New changeset 1df7a0821c73 by Steve Dower in branch '3.5':
Issue #24634: Importing uuid should not try to load libc on Windows
https://hg.python.org/cpython/rev/1df7a0821c73
msg248281 - (view) Author: Steve Dower (steve.dower) * (Python committer) Date: 2015-08-08 16:18
Done for 2.7, 3.5 and 3.6. Decided against touching 3.4 because it's not really an issue with MSVC 10.0, just 9.0 and 14.0. And I used eryksun's suggested approach.
msg248282 - (view) Author: Roundup Robot (python-dev) (Python triager) Date: 2015-08-08 16:18
New changeset 90e2747425ad by Steve Dower in branch '2.7':
Issue #24634: Importing uuid should not try to load libc on Windows
https://hg.python.org/cpython/rev/90e2747425ad
History
Date User Action Args
2022-04-11 14:58:18adminsetgithub: 68822
2015-08-08 16:18:40python-devsetmessages: + msg248282
2015-08-08 16:18:18steve.dowersetstatus: open -> closed
resolution: fixed
messages: + msg248281

stage: resolved
2015-08-08 16:14:23python-devsetnosy: + python-dev
messages: + msg248280
2015-07-15 03:17:34eryksunsetmessages: + msg246753
2015-07-15 00:17:24steve.dowersetmessages: + msg246748
2015-07-15 00:08:27eryksunsetmessages: + msg246747
2015-07-14 23:22:40steve.dowersetmessages: + msg246744
2015-07-14 23:08:54eryksunsetnosy: + eryksun
messages: + msg246742
2015-07-14 20:26:06steve.dowersetfiles: + 24634_1.patch
keywords: + patch
messages: + msg246741
2015-07-14 20:24:04steve.dowercreate