Carl J. Van Arsdall wrote:
[...]
> I actually do use pickle (not for this, but for other things), could you
> elaborate on the safety issue?

>From http://docs.python.org/lib/node63.html :

    Warning: The pickle module is not intended to be secure
    against erroneous or maliciously constructed data. Never
    unpickle data received from an untrusted or unauthenticated
    source.

A corrupted pickle can crash Python. An evil pickle could probably
hijack your process.


-- 
--Bryan

-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to