Message199463
| Author |
vstinner |
| Recipients |
barry, christian.heimes, kristjan.jonsson, pitrou, serhiy.storchaka, vstinner |
| Date |
2013年10月11日.11:58:48 |
| SpamBayes Score |
-1.0 |
| Marked as misclassified |
Yes |
| Message-id |
<1381492728.83.0.326907657479.issue19219@psf.upfronthosting.co.za> |
| In-reply-to |
| Content |
"You should ensure that loaded bytes are ASCII-only. Otherwise broken or malicious marshalled data will compromise you program."
This is not new, see the red warning in marshal doc:
"""
Warning
The marshal module is not intended to be secure against erroneous or maliciously constructed data. Never unmarshal data received from an untrusted or unauthenticated source.
""" |
|