You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This patch has a hack to read in marshaled code objects. Bytes can't be
marshaled currently (they are stored as strings). So when reading a
marshaled code object, the hack converts them to bytes.
All tests except test_modulefinder pass.
The issue is that since bytes are mutable, they aren't suitable for code
objects since a user could change them at any time.
I have security/stability issues with code objects having mutable
bytecode. This would allow someone to possibly crash the interpreter
with crappy bytecode. I also have a worry that someone might come up
with some clever way of causing different code to execute through
manipulating what LOAD_GLOBALS or STORE_GLOBALS accesses/sets.
Activity
nnorwitz commentedon Aug 25, 2007
This patch has a hack to read in marshaled code objects. Bytes can't be
marshaled currently (they are stored as strings). So when reading a
marshaled code object, the hack converts them to bytes.
All tests except test_modulefinder pass.
The issue is that since bytes are mutable, they aren't suitable for code
objects since a user could change them at any time.
gvanrossum commentedon Aug 29, 2007
I'll defer thinking about this until post-a1.
brettcannon commentedon Sep 3, 2007
I have security/stability issues with code objects having mutable
bytecode. This would allow someone to possibly crash the interpreter
with crappy bytecode. I also have a worry that someone might come up
with some clever way of causing different code to execute through
manipulating what LOAD_GLOBALS or STORE_GLOBALS accesses/sets.
gvanrossum commentedon Oct 24, 2007
We won't be doing it this way.