Message199463
"You should ensure that loaded bytes are ASCII-only. Otherwise broken or malicious marshalled data will compromise you program."
This is not new, see the red warning in marshal doc:
"""
Warning
The marshal module is not intended to be secure against erroneous or maliciously constructed data. Never unmarshal data received from an untrusted or unauthenticated source.
""" |
|
Date |
User |
Action |
Args |
2013-10-11 11:58:48 | vstinner | set | recipients:
+ vstinner, barry, pitrou, kristjan.jonsson, christian.heimes, serhiy.storchaka |
2013-10-11 11:58:48 | vstinner | set | messageid: <1381492728.83.0.326907657479.issue19219@psf.upfronthosting.co.za> |
2013-10-11 11:58:48 | vstinner | link | issue19219 messages |
2013-10-11 11:58:48 | vstinner | create | |
|