[issue8855] Shelve documentation lacks security warning

2010-08-25 Thread Longpoke
Longpoke added the comment: Okay I've attached one for the py3k branch. What about 2.7? Same patch applies there. -- keywords: +patch Added file: http://bugs.python.org/file18645/shelve.rst.patch ___ Python tracker <http://bugs.py

[issue8855] Shelve documentation lacks security warning

2010-05-29 Thread Longpoke
New submission from Longpoke : Loading a shelve can cause arbitrary code to be executed [1] and other black magic (because it's backed by Pickle). Shouldn't there be a big fat warning at the top of the shelve documentation page? Unless you're like me and assume anyt

[issue8573] Buggy _strerror in asyncore

2010-05-18 Thread Longpoke
Longpoke added the comment: Yes, it should definately be os.sterror. Dunno how I ended up omitting that, sorry. -- ___ Python tracker <http://bugs.python.org/issue8

[issue8573] Buggy _strerror in asyncore

2010-04-29 Thread Longpoke
New submission from Longpoke : This function in asyncore is buggy: def _strerror(err): res = os.strerror(err) if res == 'Unknown error': res = errorcode[err] return res - os.strerror may throw ValueError depending on the os, or return a string saying some