<html>

 <head>

  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">

 </head>

 <body bgcolor="#FFFFFF" text="#330033">

  On 1/26/2012 10:25 PM, Gregory P. Smith wrote:

  <blockquote

cite="mid:CAGE7PNJRaASr_bLHDSbcMmJcjJ3CmS5s1Vo_MOkY9=UokkWYGA@mail.gmail.com"

   type="cite">

   <pre wrap="">(and on top of all of this I believe we're all settled on having per

interpreter hash randomization <span class="moz-txt-underscore"><span class="moz-txt-tag">_</span>as well<span class="moz-txt-tag">_</span></span> in 3.3; but this AVL tree

approach is one nice option for a backport to fix the major

vulnerability)</pre>

  </blockquote>

  <br>

  If the tree code cures the problem, then randomization just makes

  debugging harder. I think if it is included in 3.3, it needs to

  have a switch to turn it on/off (whichever is not default).<br>

  <br>

  I'm curious why AVL tree rather than RB tree, simpler

  implementation? C++ stdlib includes RB tree, though, for even

  simpler implementation :)<br>

  <br>

  Can we have a tree type in 3.3, independent of dict?<br>

 </body>

</html>