0000762: cPickle allows to trigger arbitrary code execution from FCStd file

2012-07-03 14:32:19 +02:00
parent b7ed88ad77
commit f8c299c858
2 changed files with 49 additions and 1 deletions
--- a/src/App/PropertyPythonObject.h
+++ b/src/App/PropertyPythonObject.h
@@ -77,6 +77,7 @@ private:
    void restoreObject(Base::XMLReader &reader);
    std::string encodeValue(const std::string& str) const;
    std::string decodeValue(const std::string& str) const;
+    void loadPickle(const std::string& str);
    Py::Object object;
 };