oracle / graalpython

A Python 3 implementation built on GraalVM
Other
1.17k stars 101 forks source link

[GR-53542] Make sure we convert unexpected Java types before they reach the Python object space. #395

Closed graalvmbot closed 2 months ago

graalvmbot commented 2 months ago

polyglot.import_value and polyglot.eval do not use PForeignToPTypeNode to convert the result, potentially leaking j.l.String and other Java types into our object space that we do not expect.