Message 199463 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	vstinner
Recipients	barry, christian.heimes, kristjan.jonsson, pitrou, serhiy.storchaka, vstinner
Date	2013-10-11.11:58:48
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<[email protected]>
In-reply-to

Content
"You should ensure that loaded bytes are ASCII-only. Otherwise broken or malicious marshalled data will compromise you program." This is not new, see the red warning in marshal doc: """ Warning The marshal module is not intended to be secure against erroneous or maliciously constructed data. Never unmarshal data received from an untrusted or unauthenticated source. """

"You should ensure that loaded bytes are ASCII-only. Otherwise broken or malicious marshalled data will compromise you program."

This is not new, see the red warning in marshal doc:

"""
Warning

The marshal module is not intended to be secure against erroneous or maliciously constructed data. Never unmarshal data received from an untrusted or unauthenticated source.
"""

History
Date	User	Action	Args
2013-10-11 11:58:48	vstinner	set	recipients: + vstinner, barry, pitrou, kristjan.jonsson, christian.heimes, serhiy.storchaka
2013-10-11 11:58:48	vstinner	set	messageid: <[email protected]>
2013-10-11 11:58:48	vstinner	link	issue19219 messages
2013-10-11 11:58:48	vstinner	create