Jump to content

Pickle (Python)

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Qwfp (talk | contribs) at 19:04, 31 March 2009 (add context to lead). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

In the computer programming language Python, pickle is the standard mechanism for object serialization; pickling is the common term among python programmers for serialization (unpickling for deserializing). Pickle uses a simple stack-based "virtual machine" that records the "instructions" used to reconstruct the object. This makes pickle vulnerable to security risks by malformed or maliciously constructed data, that may cause the deserializer to import arbitrary modules and instantiate any object[1]. Also, not all objects can be pickled, especially ones that hold operating system resources like file handles.

Pickle was originally implemented as the pure-python pickle module, but the cPickle module (also a built-in) offers improved performance (up to 1000 times faster[1]).

References

  1. ^ a b 13.1.1 Relationship to other Python modules
Stub icon

This computing article is a stub. You can help Wikipedia by expanding it.

Retrieved from "https://en.wikipedia.org/w/index.php?title=Pickle_(Python)&oldid=280917132"