summaryrefslogtreecommitdiffstats
path: root/Misc/NEWS.d/next/Security
diff options
context:
space:
mode:
authorSteve Dower <steve.dower@python.org>2021-06-30 16:21:37 (GMT)
committerGitHub <noreply@github.com>2021-06-30 16:21:37 (GMT)
commit139de04518bd98a975b7c98ab8a38e570dc585e4 (patch)
treebd1b6f601221f24623dc618faf173bc7165f1cf0 /Misc/NEWS.d/next/Security
parent86eeeb425936ba67d79f32bfbd5c5f8002819438 (diff)
downloadcpython-139de04518bd98a975b7c98ab8a38e570dc585e4.zip
cpython-139de04518bd98a975b7c98ab8a38e570dc585e4.tar.gz
cpython-139de04518bd98a975b7c98ab8a38e570dc585e4.tar.bz2
bpo-41180: Replace marshal code.__new__ audit event with marshal.load[s] and marshal.dumps (GH-26961)
Diffstat (limited to 'Misc/NEWS.d/next/Security')
-rw-r--r--Misc/NEWS.d/next/Security/2021-06-29-23-40-22.bpo-41180.uTWHv_.rst5
1 files changed, 5 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Security/2021-06-29-23-40-22.bpo-41180.uTWHv_.rst b/Misc/NEWS.d/next/Security/2021-06-29-23-40-22.bpo-41180.uTWHv_.rst
new file mode 100644
index 0000000..88b70c7
--- /dev/null
+++ b/Misc/NEWS.d/next/Security/2021-06-29-23-40-22.bpo-41180.uTWHv_.rst
@@ -0,0 +1,5 @@
+Add auditing events to the :mod:`marshal` module, and stop raising
+``code.__init__`` events for every unmarshalled code object. Directly
+instantiated code objects will continue to raise an event, and audit event
+handlers should inspect or collect the raw marshal data. This reduces a
+significant performance overhead when loading from ``.pyc`` files.