[Python-ideas] Executable space protection: NX bit,

Cameron Simpson cs at cskk.id.au
Mon Sep 3 21:20:40 EDT 2018


On 03Sep2018 20:58, Wes Turner <wes.turner at gmail.com> wrote:
>So, if an application accepts user-supplied input (such as a JSON payload),
>is that data marked as non-executable?

Unless you've hacked the JSON decoder (I think you can supply a custom decoder 
for some things) all you're doing to get back is ints, strs, dicts and lists.  
And floats. None of those is executable.

Cheers,
Cameron Simpson <cs at cskk.id.au>


More information about the Python-ideas mailing list