Lisandro Dalcin skrev: > In Python 2.7, creating a PyCObject is marked with > PendingDeprecationWarning... Should we special case 2.7 and use > PyCapsule ? > > All programs that use PyCObject become a security problem. PyCObject makes no "type checks" on the void pointer, and can therefore be used to crash the interpreter or execute exploit code as destructor. "Type checking" void pointers might seem like a misnomer. But what PyCapsule does is to associalte the pointer with a name (a character string), that sort of acts like an access password or run-time type information.
Sturla _______________________________________________ Cython-dev mailing list [email protected] http://codespeak.net/mailman/listinfo/cython-dev
