Insecurity and Python Pickles

lwn.net

6 pointsjwilk3 comments

There should be a data-only pickle serialization protocol (that won't serialize or deserialize code).

How much work would it be to create a pickle protocol that does not exec or eval code?

python/cpython//Lib/pickle.py: https://github.com/python/cpython/blob/main/Lib/pickle.py

python/cpython//Lib/pickletools.py: https://github.com/python/cpython/blob/main/Lib/pickletools....

A data-only pickle serialization protocol implementation would need to skip calls to self.save_global() in pickle._Pickler.save() if condition(pickle_protocol) here https://github.com/python/cpython/blob/main/Lib/pickle.py#L5... and #L585 , and also in the save_type() dispatch table at #L1123 .

Here's that: https://discuss.python.org/t/create-a-new-pickle-protocol-ve...

Reply on news.ycombinator.com