On 10/29/13 12:12 PM, Patrick wrote:
Hi Everyone

I was just wondering if anyone had tried to implement a pickle virtual machine in another language? I was thinking that it might make for a nice little form of cross language IPC within a trusted environment.


Pickle can execute class constructors, which is what makes it insecure. But this also means that you need to have the class definitions on the receiving end, which means the receiving end must be in Python. Unless you special-case some set of Python classes and their equivalents in the other language, you are limited to the primitive builtins like string, dict, list, float, etc. In that case, you might as well just use json as your transport format.

--Ned.
--
https://mail.python.org/mailman/listinfo/python-list

Reply via email to