[Python-Dev] Cookie.py security

Greg Stein gstein@lyra.org
Wed, 30 Aug 2000 18:53:10 -0700


On Wed, Aug 30, 2000 at 09:21:23PM -0400, Jeremy Hylton wrote:
>...
> But neither marshal nor pickle is safe.  It is possible to cause a
> core dump by passing marshal invalid data.  It may also be possible to
> launch a stack overflow attack -- not sure.

I believe those core dumps were fixed. Seems like I remember somebody doing
some work on that.

??


Cheers,
-g

-- 
Greg Stein, http://www.lyra.org/