On Wed, Jul 13, 2016 at 1:03 PM, Oi Lee <lee...@gmail.com> wrote: > If I used the make install from github instructions > <https://github.com/google/protobuf/blob/master/src/README.md>, is that > compiled using the C++ protobuf library? > Yes, that will install C++ protobuf library. To enable python C++ implementation, you still need to run "./setup.py install --cpp_implementation".
> > > On Monday, July 11, 2016 at 5:55:19 PM UTC-6, Feng Xiao wrote: >> >> >> >> On Mon, Jul 11, 2016 at 3:39 PM, Oi Lee <lee...@gmail.com> wrote: >> >>> How do you compile protobuf-Python to use C++ protobuf library? I think >>> I'm using pure-Python protobuf implementation but not totally sure. >>> >> How did you install protobuf python? If you install it through PyPI, it's >> pure python. If you install it from source, you will only get the C++ >> implementation if you explicitly ask for it: "./setup.py build >> --cpp_implementation". >> >> >>> >>> >>> On Friday, July 8, 2016 at 4:29:46 PM UTC-6, Josh Haberman wrote: >>> >>>> This is a complicated question and hard to answer in a general way. >>>> >>>> When protobuf-Python is compiled to use the C++ protobuf library, it >>>> will use C++ for all parsing. So all of the same protections against >>>> parsing untrusted input would apply. >>>> >>>> When you are using the pure-Python protobuf implementation, I don't >>>> believe the same resource limits are enforced (for example, maximum size or >>>> maximum message depth). However, since the parsing code is pure-Python in >>>> this case, it shouldn't generally be possible to SEGV the program just by >>>> sending unexpected input. >>>> >>>> On Friday, July 8, 2016 at 9:34:23 AM UTC-7, Oi Lee wrote: >>>>> >>>>> Hello, >>>>> I saw this post Are protocol buffers hardened? >>>>> <https://groups.google.com/forum/#!searchin/protobuf/security/protobuf/DwyPEnvFJ-o/0akRpO15zWsJ>, >>>>> but I noticed the response only mentioned safeguards for C++ and Java. May >>>>> we assume that these safeguards are in place for other languages like >>>>> Python, etc? >>>>> >>>>> Thank you for your assistance. >>>>> >>>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Protocol Buffers" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to protobuf+u...@googlegroups.com. >>> To post to this group, send email to prot...@googlegroups.com. >>> Visit this group at https://groups.google.com/group/protobuf. >>> For more options, visit https://groups.google.com/d/optout. >>> >> >> -- > You received this message because you are subscribed to the Google Groups > "Protocol Buffers" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to protobuf+unsubscr...@googlegroups.com. > To post to this group, send email to protobuf@googlegroups.com. > Visit this group at https://groups.google.com/group/protobuf. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Protocol Buffers" group. To unsubscribe from this group and stop receiving emails from it, send an email to protobuf+unsubscr...@googlegroups.com. To post to this group, send email to protobuf@googlegroups.com. Visit this group at https://groups.google.com/group/protobuf. For more options, visit https://groups.google.com/d/optout.
