05.03.12 23:16, Victor Stinner написав(ла):
> Apply the timeout would require to modify the sum() function.

sum() is just one, simple, example. Any C code could potentially run long enough. Another example is the recently discussed hashtable vulnerability:

 class badhash: __hash__ = int(42).__hash__
 set([badhash() for _ in range(100000)])

> A more generic solution would be to use a subprocess.

Yes, it's the only way to secure implement the sandbox.


_______________________________________________
Python-Dev mailing list
Python-Dev@python.org
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to