[Python-Dev] Sandboxing Python (original) (raw)

Serhiy Storchaka storchaka at gmail.com
Mon Mar 5 23:26:05 CET 2012


05.03.12 23:16, Victor Stinner написав(ла):

Apply the timeout would require to modify the sum() function.

sum() is just one, simple, example. Any C code could potentially run long enough. Another example is the recently discussed hashtable vulnerability:

class badhash: hash = int(42).hash set([badhash() for _ in range(100000)])

A more generic solution would be to use a subprocess.

Yes, it's the only way to secure implement the sandbox.



More information about the Python-Dev mailing list