[issue9276] pickle should support methods
Alexander Belopolsky
report at bugs.python.org
Mon Aug 2 16:08:53 CEST 2010
Alexander Belopolsky <belopolsky at users.sourceforge.net> added the comment:
On Mon, Aug 2, 2010 at 10:05 AM, Marc-Andre Lemburg
<report at bugs.python.org> wrote:
..
> Without the definition of class x on the receiving side, there
> would be no exploit.
You are mistaken. Try adding del x (or del evil in my example)
between dumps and loads and see it working.
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue9276>
_______________________________________
More information about the Python-bugs-list
mailing list