U e5d.mL@s ddlZddlZddlZddlZddlZdddgZejZdZdZdZ dZ d Z Gd d d e Z dd lmZd dZe ddeddZddZe ddeddZddZe ddeddZddZe dded dZd!d"Ze d#d$ed%dZdd'd(Ze d)eed*dZd+d,Ze d-eed.dZd/d0Ze d1eed2dZ d3d4Z!e d5ee!d6dZ"d7d8Z#e d9e e#d:dZ$d;d<Z%e d=ee%d>dZ&d?d@Z'e dAe e'dBdZ(dCdDZ)e dEe e)dFdZ*dGdHZ+e dIe e+dJdZ,dKdLZ-e dMee-dNdZ.dOdPZ/e dQee/dRdZ0dSdTZ1e dUe e1dVdZ2dWdXZ3e dYe e3dZdZ4d[d\Z5d]d^Z6e d_ee5d`dZ7e daee6dbdZ8dcddZ9e deee9dfdZ:dgdhZ;e did$e;djdZe dnee>dodZ?dpdqZ@e dre e@dsdZAGdtdudue ZBeBdveCdwdxZDZEeBdyeCeFfdzdxZGeBd{eFd|dxZHeBd}eId~dxZJeBdeKeLfddxZMZNeBdeKddxZOeBdePddxZQeBdeLddxZReBdeSdddxZTeBdeUddxZVeBdeWddxZXeBdeYddxZZeBde[ddxZ\eBde[ddxZ]eBde ddxZ^eBde ddxZ_eBdeBddxZ`eBdeBddxZaGddde ZbebZcecdde7geGgdddecddegeDgdddecddegeDgdddecddegeDgdddecdde8geDgdddecdde?geDgdddecddeAgeDgdddecddegeMgdddecdde$geMgdddecdde"geMgdddecdde(geOgdddecdde&geOgdddecdde*geOgdddecdde,geQgdddecdddge^gdddecddde^ge^gdddecdddgeTgdddecdddgeHgdddecdddgeHgdddecdde.geRgdddecdde0geRgdddecdde2geRgdddecdde4geRgdddecdde:geJgdddecddedecd?d@ege_gddAdecdBdCege_gddDdecdEdFe ge_gddGdecdHdIdeReRge_gddJdecdKdLde_e_ge_gddMdecdNdOde_e_ge_gddPdecdQdRe e`eage_gddSdecdTdUde`e_eage_gddVdecdWdXde_e_ge_gddYdecdZd[de_e_e_ge_gdd\decd]d^eggdd_decd`dade_ggddbdecdcddeggddedecdfdgege_gddhdecdidjde_ge_gddkdgDZd[ciZeiZfegedD]n\ZhZieijjeek rZejjejjdZejedereejeeje qdS(Ndisgenopsoptimizec@seZdZdZddZdS)ArgumentDescriptornamenreaderdoccCs||_||_||_||_dSNr )selfr r rrr#/usr/lib64/python3.8/pickletools.py__init__szArgumentDescriptor.__init__N__name__ __module__ __qualname__ __slots__rrrrrr sr )unpackcCs"|d}|r|dStddS)Nrz'not enough data in stream to read uint1)read ValueErrorfdatarrr read_uint1s r!uint1rzOne-byte unsigned integer.r cCs0|d}t|dkr$td|dStddS)Nz sys.maxsize: %dz1expected %d bytes in a bytes4, but only %d remain)r,sysmaxsizerrr%rErrr read_bytes4s      rNbytes4zA counted bytes string. The first argument is a 4-byte little-endian unsigned int giving the number of bytes, and the second argument is that many bytes. cCsPt|}|tjkrtd|||}t||kr8|Std|t|fdS)Nz#bytes8 byte count > sys.maxsize: %dz1expected %d bytes in a bytes8, but only %d remain)r/rLrMrrr%rErrr read_bytes8s     rPbytes8zA counted bytes string. The first argument is an 8-byte little-endian unsigned int giving the number of bytes, and the second argument is that many bytes. cCsTt|}|tjkrtd|||}t||kr sys.maxsize: %dz5expected %d bytes in a bytearray8, but only %d remain)r/rLrMrrr% bytearrayrErrrread_bytearray89s     rS bytearray8zA counted bytearray. The first argument is an 8-byte little-endian unsigned int giving the number of bytes, and the second argument is that many bytes. cCs0|}|dstd|dd}t|dS)Nr1z4no newline found when trying to read unicodestringnlrzraw-unicode-escape)r5r6rstrrrrrread_unicodestringnl[s   rVunicodestringnlzA newline-terminated Unicode string. This is raw-unicode-escape encoded, so consists of printable ASCII characters, and may contain embedded escape sequences. cCsBt|}||}t||kr*t|ddStd|t|fdS)Nutf-8 surrogatepassz9expected %d bytes in a unicodestring1, but only %d remain)r!rr%rUrrErrrread_unicodestring1us    rZunicodestring1aAA counted Unicode string. The first argument is a 1-byte little-endian signed int giving the number of bytes in the string, and the second argument-- the UTF-8 encoding of the Unicode string -- contains that many bytes. cCsXt|}|tjkrtd|||}t||kr@t|ddStd|t|fdS)Nz+unicodestring4 byte count > sys.maxsize: %drXrYz9expected %d bytes in a unicodestring4, but only %d remain)r,rLrMrrr%rUrErrrread_unicodestring4s      r\unicodestring4aAA counted Unicode string. The first argument is a 4-byte little-endian signed int giving the number of bytes in the string, and the second argument-- the UTF-8 encoding of the Unicode string -- contains that many bytes. cCsXt|}|tjkrtd|||}t||kr@t|ddStd|t|fdS)Nz+unicodestring8 byte count > sys.maxsize: %drXrYz9expected %d bytes in a unicodestring8, but only %d remain)r/rLrMrrr%rUrErrrread_unicodestring8s      r^unicodestring8aBA counted Unicode string. The first argument is an 8-byte little-endian signed int giving the number of bytes in the string, and the second argument-- the UTF-8 encoding of the Unicode string -- contains that many bytes. cCs.t|ddd}|dkrdS|dkr&dSt|S)NFr:r;s00s01Tr=intrsrrrread_decimalnl_shorts recCs2t|ddd}|dddkr*|dd}t|S)NFr`rLrarcrrrread_decimalnl_longs  rgdecimalnl_shortaA newline-terminated decimal integer literal. This never has a trailing 'L', and the integer fit in a short Python int on the box where the pickle was written -- but there's no guarantee it will fit in a short Python int on the box where the pickle is read. decimalnl_longzA newline-terminated decimal integer literal. This has a trailing 'L', and can represent integers of any size. cCst|ddd}t|S)NFr`)r=floatrcrrr read_floatnl-srkfloatnlaA newline-terminated decimal floating literal. In general this requires 17 significant digits for roundtrip identity, and pickling then unpickling infinities, NaNs, and minus zero doesn't work across boxes, or on some boxes even on itself (e.g., Windows can't read the strings it produces for infinities or NaNs). cCs0|d}t|dkr$td|dStddS)Nr.z>drz(not enough data in stream to read float8r$rrrr read_float8Cs  rmfloat8aAn 8-byte binary representation of a float, big-endian. The format is unique to Python, and shared with the struct module (format string '>d') "in theory" (the struct and pickle implementations don't share the code -- they should). It's strongly related to the IEEE-754 double format, and, in normal cases, is in fact identical to the big-endian 754 double format. On other boxes the dynamic range is limited to that of a 754 double, and "add a half and chop" rounding is used to reduce the precision to 53 bits. However, even on a 754 box, infinities, NaNs, and minus zero may not be handled correctly (may not survive roundtrip pickling intact). ) decode_longcCs.t|}||}t||kr&tdt|S)Nz'not enough data in stream to read long1)r!rr%rrorErrr read_long1is   rplong1aA binary long, little-endian, using 1-byte size. This first reads one byte as an unsigned size, then reads that many bytes and interprets them as a little-endian 2's-complement long. If the size is 0, that's taken as a shortcut for the long 0L. cCsBt|}|dkrtd|||}t||kr:tdt|S)Nrzlong4 byte count < 0: %dz'not enough data in stream to read long4)r*rrr%rorErrr read_long4s   rrlong4aA binary representation of a long, little-endian. This first reads four bytes as a signed size (but requires the size to be >= 0), then reads that many bytes and interprets them as a little-endian 2's-complement long. If the size is 0, that's taken as a shortcut for the int 0, although LONG1 should really be used then instead (and in any case where # of bytes < 256). c@s eZdZdZddZddZdS) StackObjectr obtypercCs*||_t|tr|D]}q||_||_dSr)r isinstancetuplervr)rr rvrZ containedrrrrs  zStackObject.__init__cCs|jSrr )rrrr__repr__szStackObject.__repr__N)rrrrrrzrrrrrts  rtrbzA Python integer object.ruZ int_or_boolz#A Python integer or boolean object.boolzA Python boolean object.rjzA Python float object.Z bytes_or_strz*A Python bytes or (Unicode) string object.byteszA Python bytes object.rRzA Python bytearray object.rUz!A Python (Unicode) string object.NonezThe Python None object.rxzA Python tuple object.listzA Python list object.dictzA Python dict object.setzA Python set object. frozensetzA Python frozenset object.bufferzA Python buffer-like object.anyzAny kind of object whatsoever.Zmarkaz'The mark' is a unique object. Opcodes that operate on a variable number of objects generally don't embed the count of objects in the opcode, or pull it off the stack. Instead the MARK opcode is used to push a special marker object on the stack, and then some other opcodes grab all the objects from the top of the stack down to (but not including) the topmost marker object. stacksliceaAn object representing a contiguous slice of the stack. This is used in conjunction with markobject, to represent all of the stack following the topmost markobject. For example, the POP_MARK opcode changes the stack from [..., markobject, stackslice] to [...] No matter how many object are on the stack after the topmost markobject, POP_MARK gets rid of all of them (including the topmost markobject too). c@seZdZdZddZdS) OpcodeInfor codearg stack_before stack_afterprotorc CsB||_||_||_|D]}q||_|D]}q&||_||_||_dSrr) rr rrrrrrxrrrrdszOpcodeInfo.__init__NrrrrrrEsrZINTIaPush an integer or bool. The argument is a newline-terminated decimal literal string. The intent may have been that this always fit in a short Python int, but INT can be generated in pickles written on a 64-bit box that require a Python long on a 32-bit box. The difference between this and LONG then is that INT skips a trailing 'L', and produces a short int whenever possible. Another difference is due to that, when bool was introduced as a distinct type in 2.3, builtin names True and False were also added to 2.2.2, mapping to ints 1 and 0. For compatibility in both directions, True gets pickled as INT + "I01\n", and False as INT + "I00\n". Leading zeroes are never produced for a genuine integer. The 2.3 (and later) unpicklers special-case these and return bool instead; earlier unpicklers ignore the leading "0" and return the int. rZBININTJa1Push a four-byte signed integer. This handles the full range of Python (short) integers on a 32-bit box, directly as binary bytes (1 for the opcode and 4 for the integer). If the integer is non-negative and fits in 1 or 2 bytes, pickling via BININT1 or BININT2 saves space. ZBININT1KzPush a one-byte unsigned integer. This is a space optimization for pickling very small non-negative ints, in range(256). ZBININT2MzPush a two-byte unsigned integer. This is a space optimization for pickling small positive ints, in range(256, 2**16). Integers in range(256) can also be pickled via BININT2, but BININT1 instead saves a byte. ZLONGLaPush a long integer. The same as INT, except that the literal ends with 'L', and always unpickles to a Python long. There doesn't seem a real purpose to the trailing 'L'. Note that LONG takes time quadratic in the number of digits when unpickling (this is simply due to the nature of decimal->binary conversion). Proto 2 added linear-time (in C; still quadratic-time in Python) LONG1 and LONG4 opcodes. ZLONG1Šz|Long integer using one-byte length. A more efficient encoding of a Python long; the long1 encoding says it all.ZLONG4‹z~Long integer using found-byte length. A more efficient encoding of a Python long; the long4 encoding says it all.STRINGSaPush a Python string object. The argument is a repr-style string, with bracketing quote characters, and perhaps embedded escapes. The argument extends until the next newline character. These are usually decoded into a str instance using the encoding given to the Unpickler constructor. or the default, 'ASCII'. If the encoding given was 'bytes' however, they will be decoded as bytes object instead. Z BINSTRINGTaPush a Python string object. There are two arguments: the first is a 4-byte little-endian signed int giving the number of bytes in the string, and the second is that many bytes, which are taken literally as the string content. These are usually decoded into a str instance using the encoding given to the Unpickler constructor. or the default, 'ASCII'. If the encoding given was 'bytes' however, they will be decoded as bytes object instead. ZSHORT_BINSTRINGUaPush a Python string object. There are two arguments: the first is a 1-byte unsigned int giving the number of bytes in the string, and the second is that many bytes, which are taken literally as the string content. These are usually decoded into a str instance using the encoding given to the Unpickler constructor. or the default, 'ASCII'. If the encoding given was 'bytes' however, they will be decoded as bytes object instead. ZBINBYTESBzPush a Python bytes object. There are two arguments: the first is a 4-byte little-endian unsigned int giving the number of bytes, and the second is that many bytes, which are taken literally as the bytes content. ZSHORT_BINBYTESCzPush a Python bytes object. There are two arguments: the first is a 1-byte unsigned int giving the number of bytes, and the second is that many bytes, which are taken literally as the string content. Z BINBYTES8ŽzPush a Python bytes object. There are two arguments: the first is an 8-byte unsigned int giving the number of bytes in the string, and the second is that many bytes, which are taken literally as the string content. Z BYTEARRAY8–zPush a Python bytearray object. There are two arguments: the first is an 8-byte unsigned int giving the number of bytes in the bytearray, and the second is that many bytes, which are taken literally as the bytearray content. Z NEXT_BUFFER—z"Push an out-of-band buffer object.ZREADONLY_BUFFER˜z,Make an out-of-band buffer object read-only.ZNONENzPush None on the stack.ZNEWTRUEˆzPush True onto the stack.ZNEWFALSE‰zPush False onto the stack.UNICODEVzPush a Python Unicode string object. The argument is a raw-unicode-escape encoding of a Unicode string, and so may contain embedded escape sequences. The argument extends until the next newline character. ZSHORT_BINUNICODEŒaPush a Python Unicode string object. There are two arguments: the first is a 1-byte little-endian signed int giving the number of bytes in the string. The second is that many bytes, and is the UTF-8 encoding of the Unicode string. Z BINUNICODEXaPush a Python Unicode string object. There are two arguments: the first is a 4-byte little-endian unsigned int giving the number of bytes in the string. The second is that many bytes, and is the UTF-8 encoding of the Unicode string. Z BINUNICODE8aPush a Python Unicode string object. There are two arguments: the first is an 8-byte little-endian signed int giving the number of bytes in the string. The second is that many bytes, and is the UTF-8 encoding of the Unicode string. ZFLOATFaNewline-terminated decimal float literal. The argument is repr(a_float), and in general requires 17 significant digits for roundtrip conversion to be an identity (this is so for IEEE-754 double precision values, which is what Python float maps to on most boxes). In general, FLOAT cannot be used to transport infinities, NaNs, or minus zero across boxes (or even on a single box, if the platform C library can't read the strings it produces for such things -- Windows is like that), but may do less damage than BINFLOAT on boxes with greater precision or dynamic range than IEEE-754 double. ZBINFLOATGaFloat stored in binary form, with 8 bytes of data. This generally requires less than half the space of FLOAT encoding. In general, BINFLOAT cannot be used to transport infinities, NaNs, or minus zero, raises an exception if the exponent exceeds the range of an IEEE-754 double, and retains no more than 53 bits of precision (if there are more than that, "add a half and chop" rounding is used to cut it back to 53 significant bits). Z EMPTY_LIST]zPush an empty list.ZAPPENDazAppend an object to a list. Stack before: ... pylist anyobject Stack after: ... pylist+[anyobject] although pylist is really extended in-place. ZAPPENDSezExtend a list by a slice of stack objects. Stack before: ... pylist markobject stackslice Stack after: ... pylist+stackslice although pylist is really extended in-place. ZLISTlasBuild a list out of the topmost stack slice, after markobject. All the stack entries following the topmost markobject are placed into a single Python list, which single list object replaces all of the stack from the topmost markobject onward. For example, Stack before: ... markobject 1 2 3 'abc' Stack after: ... [1, 2, 3, 'abc'] Z EMPTY_TUPLE)zPush an empty tuple.ZTUPLEtavBuild a tuple out of the topmost stack slice, after markobject. All the stack entries following the topmost markobject are placed into a single Python tuple, which single tuple object replaces all of the stack from the topmost markobject onward. For example, Stack before: ... markobject 1 2 3 'abc' Stack after: ... (1, 2, 3, 'abc') ZTUPLE1…zBuild a one-tuple out of the topmost item on the stack. This code pops one value off the stack and pushes a tuple of length 1 whose one item is that value back onto it. In other words: stack[-1] = tuple(stack[-1:]) ZTUPLE2†aBuild a two-tuple out of the top two items on the stack. This code pops two values off the stack and pushes a tuple of length 2 whose items are those values back onto it. In other words: stack[-2:] = [tuple(stack[-2:])] ZTUPLE3‡aBuild a three-tuple out of the top three items on the stack. This code pops three values off the stack and pushes a tuple of length 3 whose items are those values back onto it. In other words: stack[-3:] = [tuple(stack[-3:])] Z EMPTY_DICT}zPush an empty dict.ZDICTdaBuild a dict out of the topmost stack slice, after markobject. All the stack entries following the topmost markobject are placed into a single Python dict, which single dict object replaces all of the stack from the topmost markobject onward. The stack slice alternates key, value, key, value, .... For example, Stack before: ... markobject 1 2 3 'abc' Stack after: ... {1: 2, 3: 'abc'} ZSETITEMrdzAdd a key+value pair to an existing dict. Stack before: ... pydict key value Stack after: ... pydict where pydict has been modified via pydict[key] = value. ZSETITEMSua\Add an arbitrary number of key+value pairs to an existing dict. The slice of the stack following the topmost markobject is taken as an alternating sequence of keys and values, added to the dict immediately under the topmost markobject. Everything at and after the topmost markobject is popped, leaving the mutated dict at the top of the stack. Stack before: ... pydict markobject key_1 value_1 ... key_n value_n Stack after: ... pydict where pydict has been modified via pydict[key_i] = value_i for i in 1, 2, ..., n, and in that order. Z EMPTY_SETzPush an empty set.ZADDITEMSa$Add an arbitrary number of items to an existing set. The slice of the stack following the topmost markobject is taken as a sequence of items, added to the set immediately under the topmost markobject. Everything at and after the topmost markobject is popped, leaving the mutated set at the top of the stack. Stack before: ... pyset markobject item_1 ... item_n Stack after: ... pyset where pyset has been modified via pyset.add(item_i) = item_i for i in 1, 2, ..., n, and in that order. Z FROZENSET‘azBuild a frozenset out of the topmost slice, after markobject. All the stack entries following the topmost markobject are placed into a single Python frozenset, which single frozenset object replaces all of the stack from the topmost markobject onward. For example, Stack before: ... markobject 1 2 3 Stack after: ... frozenset({1, 2, 3}) POP0z. ZBUILDbaFinish building an object, via __setstate__ or dict update. Stack before: ... anyobject argument Stack after: ... anyobject where anyobject may have been mutated, as follows: If the object has a __setstate__ method, anyobject.__setstate__(argument) is called. Else the argument must be a dict, the object must have a __dict__, and the object is updated via anyobject.__dict__.update(argument) ZINSTiaqBuild a class instance. This is the protocol 0 version of protocol 1's OBJ opcode. INST is followed by two newline-terminated strings, giving a module and class name, just as for the GLOBAL opcode (and see GLOBAL for more details about that). self.find_class(module, name) is used to get a class object. In addition, all the objects on the stack following the topmost markobject are gathered into a tuple and popped (along with the topmost markobject), just as for the TUPLE opcode. Now it gets complicated. If all of these are true: + The argtuple is empty (markobject was at the top of the stack at the start). + The class object does not have a __getinitargs__ attribute. then we want to create an old-style class instance without invoking its __init__() method (pickle has waffled on this over the years; not calling __init__() is current wisdom). In this case, an instance of an old-style dummy class is created, and then we try to rebind its __class__ attribute to the desired class object. If this succeeds, the new instance object is pushed on the stack, and we're done. Else (the argtuple is not empty, it's not an old-style class object, or the class object does have a __getinitargs__ attribute), the code first insists that the class object have a __safe_for_unpickling__ attribute. Unlike as for the __safe_for_unpickling__ check in REDUCE, it doesn't matter whether this attribute has a true or false value, it only matters whether it exists (XXX this is a bug). If __safe_for_unpickling__ doesn't exist, UnpicklingError is raised. Else (the class object does have a __safe_for_unpickling__ attr), the class object obtained from INST's arguments is applied to the argtuple obtained from the stack, and the resulting instance object is pushed on the stack. NOTE: checks for __safe_for_unpickling__ went away in Python 2.3. NOTE: the distinction between old-style and new-style classes does not make sense in Python 3. ZOBJoaBuild a class instance. This is the protocol 1 version of protocol 0's INST opcode, and is very much like it. The major difference is that the class object is taken off the stack, allowing it to be retrieved from the memo repeatedly if several instances of the same class are created. This can be much more efficient (in both time and space) than repeatedly embedding the module and class names in INST opcodes. Unlike INST, OBJ takes no arguments from the opcode stream. Instead the class object is taken off the stack, immediately above the topmost markobject: Stack before: ... markobject classobject stackslice Stack after: ... new_instance_object As for INST, the remainder of the stack above the markobject is gathered into an argument tuple, and then the logic seems identical, except that no __safe_for_unpickling__ check is done (XXX this is a bug). See INST for the gory details. NOTE: In Python 2.3, INST and OBJ are identical except for how they get the class object. That was always the intent; the implementations had diverged for accidental reasons. ZNEWOBJaLBuild an object instance. The stack before should be thought of as containing a class object followed by an argument tuple (the tuple being the stack top). Call these cls and args. They are popped off the stack, and the value returned by cls.__new__(cls, *args) is pushed back onto the stack. Z NEWOBJ_EX’auBuild an object instance. The stack before should be thought of as containing a class object followed by an argument tuple and by a keyword argument dict (the dict being the stack top). Call these cls and args. They are popped off the stack, and the value returned by cls.__new__(cls, *args, *kwargs) is pushed back onto the stack. PROTO€zProtocol version indicator. For protocol 2 and above, a pickle must start with this opcode. The argument is the protocol version, an int in range(2, 256). ZSTOP.zStop the unpickling machine. Every pickle ends with this opcode. The object at the top of the stack is popped, and that's the result of unpickling. The stack should be empty then. FRAME•zIndicate the beginning of a new frame. The unpickler may use this opcode to safely prefetch data from its underlying stream. ZPERSIDPaPush an object identified by a persistent ID. The pickle module doesn't define what a persistent ID means. PERSID's argument is a newline-terminated str-style (no embedded escapes, no bracketing quote characters) string, which *is* "the persistent ID". The unpickler passes this string to self.persistent_load(). Whatever object that returns is pushed on the stack. There is no implementation of persistent_load() in Python's unpickler: it must be supplied by an unpickler subclass. Z BINPERSIDQaXPush an object identified by a persistent ID. Like PERSID, except the persistent ID is popped off the stack (instead of being a string embedded in the opcode bytestream). The persistent ID is passed to self.persistent_load(), and whatever object that returns is pushed on the stack. See PERSID for more detail. z%repeated name %r at indices %d and %dz%repeated code %r at indices %d and %dFcCst}tjD]}td|s0|rtd|qtt|}t|t rPt |dkrf|rtd||fq| d}||kr|rtd||f||}|j |krt d|||j f||=qt d||fq|r d g}|D]\}}|d |j |fqt d |dS) Nz[A-Z][A-Z0-9_]+$z0skipping %r: it doesn't look like an opcode namerz5skipping %r: value %r doesn't look like a pickle coderDz+checking name %r w/ code %r for consistencyzBfor pickle code %r, pickle.py uses name %r but we're using name %rzPpickle.py appears to have a pickle opcode with name %r and code %r, but we don'tz=we appear to have pickle opcodes that pickle.py doesn't have:z name %r with code %r )code2opcopypickle__all__rematchprintgetattrrwr|r%r:r ritemsappendjoin)verboserr Z picklecodermsgrrrrassure_pickle_consistencysJ      rccst|trt|}t|dr&|j}ndd}|}|d}t| d}|dkr|dkrht dnt d|dkrxd n||f|j dkrd}n |j |}|r||||fVn |||fV|d kr.qq.dS) NtellcSsdSrrrrrrz_genops..rrDrz#pickle exhausted before seeing STOPz!at position %s, opcode %r unknownz .) rw bytes_typesioBytesIOhasattrrrrgetr:rrr)r yield_end_posZgetposposropcoderrrr_genopss.        rcCst|Sr)r)rrrrrscCsd}d}t}i}g}d}d}t|ddD]\}} } } d|jkrZ|| ||| fq*|jdkrt|} || ||| fq*d|jkrq*d|jkr|j|kr|j}d|| <||| fq*|jd kr| |kr| }| dkr|| | }n|| | fq*|| | fq*~t} | |t | |}|d krF|j d} |D]\}} d }||kr| |krrqN|| }| || <| d 7} n6||kr||| }n||| }t||j jk}|j j|d |r|j |n | |qN|j | S)NrrrrT)rrrrr)Fr)Zforce)rrr addrr%rrrwriterZ_PicklerZframerZ start_framingputrZ_FRAME_SIZE_TARGETZ commit_frameZ file_writeZ end_framinggetvalue)rrrZoldidsZnewidsopcodesrZ protoheaderrrrZend_posidxoutZpickleropZ framelessr rrrr sl                    c Csg}|dkri}d}g}d|}d} |} t|D]\} } } | dk rVtd| d|ddt| jdd|t|| jf}t|| j}| j}| j }t|}d}t |ks| jdkr@|r@|dt kr@|r8| }|dkrd}nd |}|dt k r| q| z| t }Wnt k r4d }YnXnd } }| jd kr| jd krjt|}d|}n| }||krd| } n,|sd} n |dt krd} n |d||<n*| jdkr| |kr|| g}nd| } | dk s|r,|ddt| j7}| dk r|dt| 7}|r,|d|7}|rv|d| t|7}t|} | dkr\|} |d| jddd 7}t||d| rt | t||krt d|t|f|r|| d=t |kr|| ||q0td||d|rt d|dS)Nr z%5d:)endfilez %-4s %s%srrz(MARK at unknown opcode offset)z (MARK at %d)rzno MARK exists on stack)rrrrrz(as %d)zmemo key %r already definedz'stack is empty -- can't store into memoz"can't store markobject in the memo)rrrz&memo key %r has never been stored into 2r)rz3tries to pop %d items from stack with only %d itemsz highest protocol among opcodes =zstack not empty after STOP: %r)rrreprrr%r maxrrr markobjectpopindexrrsplitrextend)rrmemo indentlevelannotatestackZmaxprotoZ markstackZ indentchunkZerrormsgZannocolrrrlineZbeforeZafterZnumtopopZmarkmsgZmarkposZmemo_idxrrrr[ s-                      c@seZdZddZdS)_ExamplecCs ||_dSr)value)rrrrrr sz_Example.__init__N)rrrrrrrrr sra >>> import pickle >>> x = [1, 2, (3, 4), {b'abc': "def"}] >>> pkl0 = pickle.dumps(x, 0) >>> dis(pkl0) 0: ( MARK 1: l LIST (MARK at 0) 2: p PUT 0 5: I INT 1 8: a APPEND 9: I INT 2 12: a APPEND 13: ( MARK 14: I INT 3 17: I INT 4 20: t TUPLE (MARK at 13) 21: p PUT 1 24: a APPEND 25: ( MARK 26: d DICT (MARK at 25) 27: p PUT 2 30: c GLOBAL '_codecs encode' 46: p PUT 3 49: ( MARK 50: V UNICODE 'abc' 55: p PUT 4 58: V UNICODE 'latin1' 66: p PUT 5 69: t TUPLE (MARK at 49) 70: p PUT 6 73: R REDUCE 74: p PUT 7 77: V UNICODE 'def' 82: p PUT 8 85: s SETITEM 86: a APPEND 87: . STOP highest protocol among opcodes = 0 Try again with a "binary" pickle. >>> pkl1 = pickle.dumps(x, 1) >>> dis(pkl1) 0: ] EMPTY_LIST 1: q BINPUT 0 3: ( MARK 4: K BININT1 1 6: K BININT1 2 8: ( MARK 9: K BININT1 3 11: K BININT1 4 13: t TUPLE (MARK at 8) 14: q BINPUT 1 16: } EMPTY_DICT 17: q BINPUT 2 19: c GLOBAL '_codecs encode' 35: q BINPUT 3 37: ( MARK 38: X BINUNICODE 'abc' 46: q BINPUT 4 48: X BINUNICODE 'latin1' 59: q BINPUT 5 61: t TUPLE (MARK at 37) 62: q BINPUT 6 64: R REDUCE 65: q BINPUT 7 67: X BINUNICODE 'def' 75: q BINPUT 8 77: s SETITEM 78: e APPENDS (MARK at 3) 79: . STOP highest protocol among opcodes = 1 Exercise the INST/OBJ/BUILD family. >>> import pickletools >>> dis(pickle.dumps(pickletools.dis, 0)) 0: c GLOBAL 'pickletools dis' 17: p PUT 0 20: . STOP highest protocol among opcodes = 0 >>> from pickletools import _Example >>> x = [_Example(42)] * 2 >>> dis(pickle.dumps(x, 0)) 0: ( MARK 1: l LIST (MARK at 0) 2: p PUT 0 5: c GLOBAL 'copy_reg _reconstructor' 30: p PUT 1 33: ( MARK 34: c GLOBAL 'pickletools _Example' 56: p PUT 2 59: c GLOBAL '__builtin__ object' 79: p PUT 3 82: N NONE 83: t TUPLE (MARK at 33) 84: p PUT 4 87: R REDUCE 88: p PUT 5 91: ( MARK 92: d DICT (MARK at 91) 93: p PUT 6 96: V UNICODE 'value' 103: p PUT 7 106: I INT 42 110: s SETITEM 111: b BUILD 112: a APPEND 113: g GET 5 116: a APPEND 117: . STOP highest protocol among opcodes = 0 >>> dis(pickle.dumps(x, 1)) 0: ] EMPTY_LIST 1: q BINPUT 0 3: ( MARK 4: c GLOBAL 'copy_reg _reconstructor' 29: q BINPUT 1 31: ( MARK 32: c GLOBAL 'pickletools _Example' 54: q BINPUT 2 56: c GLOBAL '__builtin__ object' 76: q BINPUT 3 78: N NONE 79: t TUPLE (MARK at 31) 80: q BINPUT 4 82: R REDUCE 83: q BINPUT 5 85: } EMPTY_DICT 86: q BINPUT 6 88: X BINUNICODE 'value' 98: q BINPUT 7 100: K BININT1 42 102: s SETITEM 103: b BUILD 104: h BINGET 5 106: e APPENDS (MARK at 3) 107: . STOP highest protocol among opcodes = 1 Try "the canonical" recursive-object test. >>> L = [] >>> T = L, >>> L.append(T) >>> L[0] is T True >>> T[0] is L True >>> L[0][0] is L True >>> T[0][0] is T True >>> dis(pickle.dumps(L, 0)) 0: ( MARK 1: l LIST (MARK at 0) 2: p PUT 0 5: ( MARK 6: g GET 0 9: t TUPLE (MARK at 5) 10: p PUT 1 13: a APPEND 14: . STOP highest protocol among opcodes = 0 >>> dis(pickle.dumps(L, 1)) 0: ] EMPTY_LIST 1: q BINPUT 0 3: ( MARK 4: h BINGET 0 6: t TUPLE (MARK at 3) 7: q BINPUT 1 9: a APPEND 10: . STOP highest protocol among opcodes = 1 Note that, in the protocol 0 pickle of the recursive tuple, the disassembler has to emulate the stack in order to realize that the POP opcode at 16 gets rid of the MARK at 0. >>> dis(pickle.dumps(T, 0)) 0: ( MARK 1: ( MARK 2: l LIST (MARK at 1) 3: p PUT 0 6: ( MARK 7: g GET 0 10: t TUPLE (MARK at 6) 11: p PUT 1 14: a APPEND 15: 0 POP 16: 0 POP (MARK at 0) 17: g GET 1 20: . STOP highest protocol among opcodes = 0 >>> dis(pickle.dumps(T, 1)) 0: ( MARK 1: ] EMPTY_LIST 2: q BINPUT 0 4: ( MARK 5: h BINGET 0 7: t TUPLE (MARK at 4) 8: q BINPUT 1 10: a APPEND 11: 1 POP_MARK (MARK at 0) 12: h BINGET 1 14: . STOP highest protocol among opcodes = 1 Try protocol 2. >>> dis(pickle.dumps(L, 2)) 0: \x80 PROTO 2 2: ] EMPTY_LIST 3: q BINPUT 0 5: h BINGET 0 7: \x85 TUPLE1 8: q BINPUT 1 10: a APPEND 11: . STOP highest protocol among opcodes = 2 >>> dis(pickle.dumps(T, 2)) 0: \x80 PROTO 2 2: ] EMPTY_LIST 3: q BINPUT 0 5: h BINGET 0 7: \x85 TUPLE1 8: q BINPUT 1 10: a APPEND 11: 0 POP 12: h BINGET 1 14: . STOP highest protocol among opcodes = 2 Try protocol 3 with annotations: >>> dis(pickle.dumps(T, 3), annotate=1) 0: \x80 PROTO 3 Protocol version indicator. 2: ] EMPTY_LIST Push an empty list. 3: q BINPUT 0 Store the stack top into the memo. The stack is not popped. 5: h BINGET 0 Read an object from the memo and push it on the stack. 7: \x85 TUPLE1 Build a one-tuple out of the topmost item on the stack. 8: q BINPUT 1 Store the stack top into the memo. The stack is not popped. 10: a APPEND Append an object to a list. 11: 0 POP Discard the top stack item, shrinking the stack by one item. 12: h BINGET 1 Read an object from the memo and push it on the stack. 14: . STOP Stop the unpickling machine. highest protocol among opcodes = 2 a= >>> import pickle >>> import io >>> f = io.BytesIO() >>> p = pickle.Pickler(f, 2) >>> x = [1, 2, 3] >>> p.dump(x) >>> p.dump(x) >>> f.seek(0) 0 >>> memo = {} >>> dis(f, memo=memo) 0: \x80 PROTO 2 2: ] EMPTY_LIST 3: q BINPUT 0 5: ( MARK 6: K BININT1 1 8: K BININT1 2 10: K BININT1 3 12: e APPENDS (MARK at 5) 13: . STOP highest protocol among opcodes = 2 >>> dis(f, memo=memo) 14: \x80 PROTO 2 16: h BINGET 0 18: . STOP highest protocol among opcodes = 2 )Zdisassembler_testZdisassembler_memo_testcCsddl}|S)Nr)doctestZtestmod)rrrr_test sr__main__z$disassemble one or more pickle files)Z description pickle_filebr*zthe pickle file)typenargshelpz-oz--outputwz+the file where the output should be written)defaultrrz-mz--memo store_truez#preserve memo between disassemblies)actionrz-lz --indentlevelz8the number of blanks by which to indent a new MARK levelz-az --annotatez2annotate each line with a short opcode descriptionz-pz --preamblez==> {name} <==zMif more than one pickle file is specified, print this before each disassembly)rrz-tz--testzrun self-test suitez-vz)run verbosely; only affects self-test runryr)TT)F)F)NNr)r)r8rrrrLrrZ UP_TO_NEWLINEZTAKEN_FROM_ARGUMENT1ZTAKEN_FROM_ARGUMENT4ZTAKEN_FROM_ARGUMENT4UZTAKEN_FROM_ARGUMENT8Uobjectr Zstructrr&r!r"r'r(r*r+r,r-r/r0r=r>r@rArBrCrFrGrHrIrJrKrNrOrPrQrSrTrVrWrZr[r\r]r^r_rergrhrirkrlrmrnrorprqrrrsrtrbZpyintZpylongr{Zpyinteger_or_boolZpyboolrjZpyfloatr|rUZpybytes_or_strZpystringZpybytesrRZ pybytearrayZ pyunicoderZpynonerxZpytupler~ZpylistrZpydictrZpysetZ pyfrozensetZpybufferZ anyobjectr rrrrZname2iZcode2i enumeraterrr rrrrrrrrrZ _dis_testZ _memo_testZ__test__rrargparseArgumentParserparser add_argumentZFileTypestdout parse_argsargsZtestrrZ print_helpr%outputrrrZpreambleformatrrrrr s^ $   /                     ;                    2     &  C