Is python buffer overflow proof?

Paul Rubin http
Tue Aug 4 06:34:15 CEST 2009


Steven D'Aprano <steven at REMOVE.THIS.cybersource.com.au> writes:
> > The Python interpreter is written in C. Python extension modules are
> > written in C (or something similar). If you find an unprotected buffer
> > in this C code, you can possibly overflow this buffer. 
> 
> How are C extension modules "_pure_ python"?

A lot of basic Python constructs (like numbers and dictionaries) are
implemented as C extension modules.  It is reasonable to consider
"pure Python" to include the contents of the Python standard library.



More information about the Python-list mailing list