is there a safe marshaler?

Irmen de Jong irmen.NOSPAM at xs4all.nl
Thu Feb 10 09:01:25 EST 2005


Pickle and marshal are not safe. They can do harmful
things if fed maliciously constructed data.
That is a pity, because marshal is fast.
I need a fast and safe (secure) marshaler.
Is xdrlib the only option?
I would expect that it is fast and safe because
it (the xdr spec) has been around for so long.

Or are there better options (perhaps 3rd party libraries)?

Thanks

Irmen.



More information about the Python-list mailing list