hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 13:45:19 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
cdfdcc66bd97e6cf35246ca06333601b5813f8ca
codeql/python/change-notes/2021-10-08-improve-pickle-dill-shelve-modeling.md
Rasmus Wriedt Larsen fd0c386a4c Python: Add change-note
2021-10-08 12:06:18 +02:00

373 B
Raw Blame History

lgtm,codescanning

  • Improved modeling of decoding through pickle related functions (which can lead to code execution), resulting in additional sinks for the Deserializing untrusted input query (py/unsafe-deserialization). Now we fully support pickle.load, pickle.loads, pickle.Unpickler, marshal.load, marshal.loads, dill.load, dill.loads, shelve.open.