News for hackers. Stuff that matters.

A comment on Make CPython segfault in 5 lines of code. Parent comment

Re:Make CPython segfault in 5 lines of code by poizan42 on Thursday December 19, 2019 @01:44AM (#21832578)
It has always been the position of the CPython developers that using python for sandboxing is unsupported. With that in mind it doesn't really matter if you can "exploit" python with weird bytecode because you are supposed to be on the other side of the airtight hatchway[0] anyways.

I don't know what the stance of other python runtimes are, but you should probably just use a sandbox at OS level which is likely to be tested far more thoroughly.

[0]: https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31...

[ Parent | on HN ]
Re:Make CPython segfault in 5 lines of code by ChrisSD on Thursday December 19, 2019 @07:23AM (#21834253)
It's worth mentioning the interesting failure of pysandbox:

> I now think that putting a sandbox directly in Python cannot be secure. To build a secure sandbox, the whole Python process must be put in an external sandbox.

https://mail.python.org/pipermail/python-dev/2013-November/1...

[ Parent | on HN ]
Re:Make CPython segfault in 5 lines of code by quietbritishjim on Thursday December 19, 2019 @04:30AM (#21833332)
Comments for that link:

https://web.archive.org/web/20190113115213/https://blogs.msd...

[ Parent | on HN ]