Christian Heimes <li...@cheimes.de> added the comment:

Yes, it's like pickle, but it is not like you think.

The pickle module has a similar security disclaimer, 
https://docs.python.org/dev/library/pickle.html . We might agree to fix 
segfaults in unpickler code if the fix is simple and does not cause backwards 
compatibility or performance regressions. It's more likely that we decide 
against it because the pickle format is inherently insecure and not designed to 
handle untrusted data.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue41208>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to