Re: [pypy-dev] Use of marshal in the sandbox: is stdlib marshal OK?

2011-12-28 Thread Armin Rigo
Hi Ned, On Wed, Dec 28, 2011 at 15:34, Ned Batchelder wrote: > The problem with "bundling pypy's marshal.py" is that it pulls in a lot of > infrastructure modules, which bulks up the calling process. Unsure what you mean. It seems to me that lib_pypy/marshal.py just imports lib_pypy/_marshal.py

Re: [pypy-dev] Use of marshal in the sandbox: is stdlib marshal OK?

2011-12-28 Thread Ned Batchelder
I guess that is a possibility, but another principle is to use well-used and widely-reviewed code where possible, no? I guess the problem is that built-in marshal isn't trying hard to protect itself against malicious data? The problem with "bundling pypy's marshal.py" is that it pulls in a lo