Re: Shed Skin Python-to-C++ Compiler 0.0.3 Release: some fixes, 3 MB Windows package

2005-09-26 Thread cmkl
I'va got a trojan message by my virus scanner trying to download the
0.03 exe-file. Something to worry about?

Carl

Mark Dufour schrieb:

> Hi all,
>
> Thanks to the people trying out Shed Skin 0.0.2 and letting me know
> about several problems they encountered. I have released an updated
> version, 0.0.3. It contains some fixes, adds support for several
> builtin functions (sorted, xrange..) and the Windows version is now a
> mere 3 MB, instead of 20 :-)
>
> Shed Skin's main purpose is to optimize algorithmic-like Python code,
> by applying advanced global type inference techniques. It does not
> support e.g. exceptions (yet), and there are currently some other
> limitations. Importing modules requires some extra work on the part of
> the user (see the README for details,)  although some imports are
> currently supported (some math, random functions and sys.argv.) What
> you gain by using Shed Skin is highly optimized code (industrial C++
> compiler), independent of any virtual machine. It is also possible to
> create highly optimized extension modules this way.
>
> I invite anyone to try not too large algorithmic-like programs (e.g.
> AI stuff) with Shed Skin and to let me know if there are any problems.
> Even though 129 test programs already work well (6 of which are larger
> than 100 lines), there are still many unimplemented minor features
> that I can easily fix, provided someone shows me a nice use case.
> Thanks to the people that have sent me failing code snippets before!
>
> http://shedskin.sourceforge.net
> http://shed-skin.blogspot.com
> 
> 
> Thanks!
> Mark Dufour.

-- 
http://mail.python.org/mailman/listinfo/python-list


Re: py2exe 0.6.1 released

2005-09-06 Thread cmkl
Hi,

I didnt succeed to bundle vpython-3.2.3 with py2exe-0.6.1 - regardless
if its build as single file or not:

"This application has requested the Runtime to terminate it in an
unusual way"  and so on...

This error message seems not generated by py2exe. At least I could not
find a reference to it in the sources of py2exe.

Regards

Carl

-- 
http://mail.python.org/mailman/listinfo/python-list


Re: py2exe 0.6.1 released

2005-09-07 Thread cmkl
I removed conditional imports from visual and after that I works like a
charm. Now I've got a VPython application within a single 3 Mbyte
exe-file (Python-2.3).
That is really cool. 

Thanks

Carl

-- 
http://mail.python.org/mailman/listinfo/python-list


Re: is there a safe marshaler?

2005-02-11 Thread cmkl
Irmen de Jong <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>...
> Pierre Barbier de Reuille wrote:
> > Irmen de Jong a écrit :
> > 
> >> Pickle and marshal are not safe. They can do harmful
> >> things if fed maliciously constructed data.
> >> That is a pity, because marshal is fast.
> >> I need a fast and safe (secure) marshaler.
> >> Is xdrlib the only option?
> >> I would expect that it is fast and safe because
> >> it (the xdr spec) has been around for so long.
> >>
> >> Or are there better options (perhaps 3rd party libraries)?
> >>
> >> Thanks
> >>
> >> Irmen.
> > 
> > 
> > What exactly do you mean by "safe" ? Do you want to ensure your objects 
> > cannot receive corrupted data ? Do you want to ensure no code will be 
> > evaluated during the unmarshalling ?
> 
> "safe (secure)"
> But to be more precise, let's look at the security warning that
> is in the marshal documentation:
> "The marshal module is not intended to be secure against erroneous or 
> maliciously constructed data. Never unmarshal data received from an 
> untrusted or unauthenticated source."
> 
> So essentially I want the opposite of that ;-)
> 
> I want a marshalar that is okay to use where the data it processes
> comes from unknown, external sources (untrusted). It should not crash
> on corrupt data and it should not execute arbitrary code when
> unmarshaling, so that it is safe against hacking attempts.
> 
> Oh, preferrably, it should be fast :)
> Some XML-ish thing may be secure but is likely to be not fast at all.
> 
> Ideally it should be able to transfer user defined Python types,
> but if it is like marshal (can only marshal builtin types) that's
> okay too.
> 
> --Irmen

I'm just curious,

but can't effbot's fast cElementree be used for PYROs XML_PICKLE 
and would it be safe and fast enough?

Carl
-- 
http://mail.python.org/mailman/listinfo/python-list