Is there any security risk related to the use of the reader?

[Amirouche Boubekki]

I have procedures like that in my program:

(define-public (scm->string scm)
  (call-with-output-string
    (lambda (port)
      (write scm port))))

(define-public (string->scm string)
  (call-with-input-string string read))

Is it safe to pass to this procedures input from third parties?

TIA!

--
Amirouche ~ amz3 ~ http://www.hyperdev.fr