Re: RE: Advise of programming one of my first programs

Path	csiph.com!usenet.pasdenom.info!aioe.org!news.stack.nl!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path	<jeanpierreda@gmail.com>
X-Original-To	python-list@python.org
Delivered-To	python-list@mail.python.org
X-Spam-Status	OK 0.066
X-Spam-Evidence	'H': 0.87; 'S': 0.00; 'skip:l 60': 0.09; 'cc:addr :python-list': 0.15; 'driscoll': 0.16; 'eval': 0.16; 'subject:programming': 0.16; 'passed': 0.20; 'wrote:': 0.21; 'header:In-Reply-To:1': 0.22; 'import': 0.24; 'message- id:@mail.gmail.com': 0.27; 'cc:addr:python.org': 0.27; 'least': 0.27; 'pm,': 0.28; '27,': 0.29; 'yes.': 0.29; 'code:': 0.31; 'received:209.85': 0.32; 'received:google.com': 0.32; 'cc:2**2': 0.33; 'in.': 0.33; 'in:': 0.33; 'url:python': 0.34; 'received:209': 0.35; 'sure': 0.36; 'url:org': 0.36; 'running': 0.36; 'being': 0.39; 'mar': 0.61; 'is.': 0.67; 'url:5': 0.67; '2012': 0.69; 'url:release': 0.84
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=8QAUhYu0aXzXSH8AUmJ4djJ/1EkgGH04LAFvZH/4QL0=; b=kMDKnKXg5pvzbDyTbhg2OawAgEjT369mWeKFOOp2Myi4H5xy8ZDY6QGDCK/VsoVuhw Y2piPLSofUblf7CBXi0kkhNAGqUCYE1wpmIhvlPchsezhaGG8DMxIEjUcHCmkJMu8omI i1ARthkZAp3sd6RVfeTN4RwE0/D/8PtlVqO63XqnibGKaDfPWQWT+pZydqbDlNQ1tUyM zyB9D6cz2mbcEcjqJKdcpyPHJiiMqsIbshA3urVqJFSBOsFudc2KZKMVyqKaJWPDXDBo v9nA2gLUDxrX5usM2VoQDGLjW2M2jjlveeMNKIvpJxAI2xHCJp42wghrzi4N2oesrMMM uCTQ==
MIME-Version	1.0
In-Reply-To	<4F72385E.8020804@cs.wisc.edu>
References	<CAKhY55OL1qvq+kqbyKT8gEuFOK4BkgYGZkkyUVb84_H9VVEQhA@mail.gmail.com> <5B80DD153D7D744689F57F4FB69AF4740928C365@SCACMX008.exchad.jpmchase.net> <CAKhY55O9zE_jxF5PvzOF0DGifRT2gZLbRHiuQ_a1vA-aGGDb9g@mail.gmail.com> <5B80DD153D7D744689F57F4FB69AF4740928E137@SCACMX008.exchad.jpmchase.net> <4F72385E.8020804@cs.wisc.edu>
From	Devin Jeanpierre <jeanpierreda@gmail.com>
Date	Tue, 27 Mar 2012 20:26:21 -0400
Subject	Re: RE: Advise of programming one of my first programs
To	Evan Driscoll <driscoll@cs.wisc.edu>
Content-Type	text/plain; charset=UTF-8
Cc	"python-list@python.org" <python-list@python.org>
X-BeenThere	python-list@python.org
X-Mailman-Version	2.1.12
Precedence	list
List-Id	General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe	<http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-list>
List-Post	<mailto:python-list@python.org>
List-Help	<mailto:python-list-request@python.org?subject=help>
List-Subscribe	<http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups	comp.lang.python
Message-ID	<mailman.1057.1332894426.3037.python-list@python.org> (permalink)
Lines	15
NNTP-Posting-Host	2001:888:2000:d::a6
X-Trace	1332894426 news.xs4all.nl 6852 [2001:888:2000:d::a6]:59250
X-Complaints-To	abuse@xs4all.nl
Xref	csiph.com comp.lang.python:22259

Show key headers only | View raw

On Tue, Mar 27, 2012 at 5:59 PM, Evan Driscoll <driscoll@cs.wisc.edu> wrote:
>> The use of eval is dangerous if you are not *completely* sure what is
>> being passed in. Try using pickle instead:
>> http://docs.python.org/release/2.5.2/lib/pickle-example.html
>
>
> Um, at least by my understanding, the use of Pickle is also dangerous if you
> are not completely sure what is being passed in:

Oh goodness yes. pickle is exactly as unsafe as eval is. Try running this code:

from pickle import loads
loads("c__builtin__\neval\n(c__builtin__\nraw_input\n(S'py>'\ntRtR.")

-- Devin

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread

Thread

Re: RE: Advise of programming one of my first programs Devin Jeanpierre <jeanpierreda@gmail.com> - 2012-03-27 20:26 -0400

csiph-web