We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Both ast.parse() and ast.literal_eval() can trigger a segfault with the appropriate string input due to the recursion depth limit of the AST compiler.
ast.parse()
ast.literal_eval()
https://bugs.python.org/issue32758
Sorry, something went wrong.
Warn that ast.parse() and ast.literal_eval() can segfault the interpr…
9099aa6
…eter
Got approval for the wording from @serhiy-storchaka in the issue itself, but he also pointed out that there are implicit uses of the troublesome functions in various other places, so the comment needs to spread out a bit more before this PR can get merged.
7a7f100
Thanks @brettcannon for the PR 🌮🎉.. I'm working now to backport this PR to: 2.7, 3.6, 3.7. 🐍🍒⛏🤖
bpo-32758: Warn that ast.parse() and ast.literal_eval() can segfault …
f3f8eec
…the interpreter (pythonGH-5960) (cherry picked from commit 7a7f100) Co-authored-by: Brett Cannon <[email protected]>
3.7 branch.
Sorry, @brettcannon, I could not cleanly backport this to 2.7 due to a conflict. Please backport using cherry_picker on command line. cherry_picker 7a7f100eb352d08938ee0f5ba59c18f56dc4a7b5 2.7
2.7
cherry_picker 7a7f100eb352d08938ee0f5ba59c18f56dc4a7b5 2.7
9714fba
3.6 branch.
b316c44
…the interpreter (GH-6042) (cherry picked from commit 7a7f100) Co-authored-by: Brett Cannon <[email protected]>
f2fffd4
…the interpreter (GH-6041) (cherry picked from commit 7a7f100) Co-authored-by: Brett Cannon <[email protected]>
6b2d76f
…the interpreter (pythonGH-5960)
62a1224
2.7 branch.
dedb99a
…the interpreter (GH-16565) (cherry picked from commit 7a7f100) Co-authored-by: Brett Cannon <[email protected]>
serhiy-storchaka Awaiting requested review from serhiy-storchaka
brettcannon
Successfully merging this pull request may close these issues.