#7706: palp (lattice polytopes): replace the pickle-based database of lattice
polytopes by a non-pickle database format
------------------------+---------------------------------------------------
Reporter: was | Owner: mhampton
Type: defect | Status: new
Priority: major | Milestone: sage-4.3.1
Component: geometry | Keywords:
Work_issues: | Author:
Upstream: N/A | Reviewer:
Merged: |
------------------------+---------------------------------------------------
The Sage source distribution must ship with a bare minimum of opaque
potentially dangerous binary files. Pickles (i.e. sobjs) are opaque
binary files that can invoke arbitrary code when being unpickled. Also,
sobj's have the drawback that they can someday break, and can be very hard
to update and extend later. They are also hard to scan for virus.
There are currently three places in the Sage source code that includes
pickles:
* the pickle jar,
* the database of lattice polytopes
* the world map graph
For this ticket, please find a way to replace the lattice polytopes
database spkg with something that contains no pickles. One solution would
be to put plain text files in polytopes_db-*.spkg that described the 2d
and 3d lattice polytopes. Then make the sobj's only when the spkg is
installed. This would require making the spkg depend on the sage library
(which is very reasonable).
Another possibility would be to change your code so that the first time
the lattice polytope table is needed, a plain text file is parsed (so
there is never an sobj).
--
Ticket URL: <http://trac.sagemath.org/sage_trac/ticket/7706>
Sage <http://www.sagemath.org>
Sage: Creating a Viable Open Source Alternative to Magma, Maple, Mathematica,
and MATLAB
--
You received this message because you are subscribed to the Google Groups
"sage-trac" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/sage-trac?hl=en.
