Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #20948 > unrolled thread

Re: pickle handling multiple objects ..

Started byIan Kelly <ian.g.kelly@gmail.com>
First post2012-02-27 11:24 -0700
Last post2012-02-27 11:24 -0700
Articles 1 — 1 participant

Back to article view | Back to comp.lang.python

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  Re: pickle handling multiple objects .. Ian Kelly <ian.g.kelly@gmail.com> - 2012-02-27 11:24 -0700

#20948 — Re: pickle handling multiple objects ..

FromIan Kelly <ian.g.kelly@gmail.com>
Date2012-02-27 11:24 -0700
SubjectRe: pickle handling multiple objects ..
Message-ID<mailman.206.1330367096.3037.python-list@python.org>
On Sun, Feb 26, 2012 at 6:00 AM, Chris Angelico <rosuav@gmail.com> wrote:
> Additionally, you'll get a weird crash out of your program if load()
> returns something other than a sequence of length 3. Remember,
> everything that comes from outside your code is untrusted, even if you
> think you made it just two seconds ago.

While that's true, if your pickle is untrusted then a ValueError from
unpacking is the least of your worries.  You should never attempt to
load an untrusted pickle in the first place, as doing so allows it to
execute arbitrary code on your system.

Cheers,
Ian

[toc] | [standalone]


Back to top | Article view | comp.lang.python


csiph-web