Improved polyglot to do recursive checks, and detect numpy

trailofbits / fickling

A Python pickling decompiler and static analyzer

GNU Lesser General Public License v3.0

413 stars 48 forks source link

Closed coldwaterq closed 4 months ago

coldwaterq commented 6 months ago

Updated check_pickle
- general results are unchanged, however now min_length can be used to avoid detecting tar files that often start with . as pickles.
added checks for numpy and numpy pickles into find_file_properties
added find_file_properties_recursively which checks the contents of tar and zip files

All of this should allow for the detection of more pickles in non-standard formats

CLAassistant commented 6 months ago

All committers have signed the CLA.

coldwaterq commented 5 months ago

Updated so that it should pass the lints and tests now. Can you re-run those checks?

suhacker1 commented 4 months ago

LGTM!