cPickle segfault with nested dicts in threaded env

Kenneth Dombrowski kdombrowski at gmail.com
Thu Sep 9 11:06:42 EDT 2010


On Wed, Sep 8, 2010 at 6:55 PM, Paul Rubin <no.email at nospam.invalid> wrote:
> Carl Banks <pavlovevidence at gmail.com> writes:
>> Since Python 2.7 is released, Python 2.5 is no longer accepting bug
>> fixes, only security fixes.  So be aware.
>
> Segfaults should be treated as security holes unless there's convincing
> reasons that no exploit is possible.  So the bug should be reported
> against 2.5 as well as later versions.

Hi Paul,

Thanks for the input, it sounds reasonable to me.  I reported it & the
maintainers can decide what to do with it:
http://bugs.python.org/issue9812

Thanks again everyone,
Kenneth



More information about the Python-list mailing list