[issue34045] DoS due to null pointer dereference in marshal.dumps()

Eric V. Smith report at bugs.python.org
Wed Jul 4 11:12:43 EDT 2018


Eric V. Smith <eric at trueblade.com> added the comment:

I do not believe this is a problem. The marshal documentation includes this:

Warning The marshal module is not intended to be secure against erroneous or maliciously constructed data. Never unmarshal data received from an untrusted or unauthenticated source.

----------
nosy: +eric.smith

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue34045>
_______________________________________


More information about the Python-bugs-list mailing list