[Python-Dev] Safely importing zip files with C extensions

Christian Heimes christian at python.org
Thu Mar 28 18:12:05 CET 2013


Am 28.03.2013 17:09, schrieb Brett Cannon:
> Which must be done carefully to prevent a security issue. It shouldn't
> be unzipped anywhere but into a directory only writable by the process. 

Cleanup is going to be tricky or even impossible. Windows locks loaded
DLLs and therefore prevents their removal. It's possible to unload DLLs
but I don't know the implications.


More information about the Python-Dev mailing list