[issue9276] pickle should support methods

Alexander Belopolsky report at bugs.python.org
Mon Aug 2 16:08:53 CEST 2010


Alexander Belopolsky <belopolsky at users.sourceforge.net> added the comment:

On Mon, Aug 2, 2010 at 10:05 AM, Marc-Andre Lemburg
<report at bugs.python.org> wrote:
..
> Without the definition of class x on the receiving side, there
> would be no exploit.

You are mistaken.  Try adding del x (or del evil in my example)
between dumps and loads and see it working.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue9276>
_______________________________________


More information about the Python-bugs-list mailing list