blob: fc132651a97eb5943a6569ba970664b24a925198 [file] [log] [blame]
Barry Warsawf595fd92001-11-15 23:39:07 +00001\section{\module{pickle} --- Python object serialization}
Fred Drakeb91e9341998-07-23 17:59:49 +00002
Fred Drakeffbe6871999-04-22 21:23:22 +00003\declaremodule{standard}{pickle}
Fred Drakeb91e9341998-07-23 17:59:49 +00004\modulesynopsis{Convert Python objects to streams of bytes and back.}
Fred Drake38e5d272000-04-03 20:13:55 +00005% Substantial improvements by Jim Kerr <jbkerr@sr.hp.com>.
Barry Warsawf595fd92001-11-15 23:39:07 +00006% Rewritten by Barry Warsaw <barry@zope.com>
Fred Drakeb91e9341998-07-23 17:59:49 +00007
Thomas Woutersf8316632000-07-16 19:01:10 +00008\index{persistence}
Guido van Rossumd1883581995-02-15 15:53:08 +00009\indexii{persistent}{objects}
10\indexii{serializing}{objects}
11\indexii{marshalling}{objects}
12\indexii{flattening}{objects}
13\indexii{pickling}{objects}
14
Barry Warsawf595fd92001-11-15 23:39:07 +000015The \module{pickle} module implements a fundamental, but powerful
16algorithm for serializing and de-serializing a Python object
17structure. ``Pickling'' is the process whereby a Python object
18hierarchy is converted into a byte stream, and ``unpickling'' is the
19inverse operation, whereby a byte stream is converted back into an
20object hierarchy. Pickling (and unpickling) is alternatively known as
Fred Drake2744f432001-11-26 21:30:36 +000021``serialization'', ``marshalling,''\footnote{Don't confuse this with
22the \refmodule{marshal} module} or ``flattening'',
Barry Warsawf595fd92001-11-15 23:39:07 +000023however the preferred term used here is ``pickling'' and
24``unpickling'' to avoid confusing.
Guido van Rossum470be141995-03-17 16:07:09 +000025
Barry Warsawf595fd92001-11-15 23:39:07 +000026This documentation describes both the \module{pickle} module and the
Fred Drake2744f432001-11-26 21:30:36 +000027\refmodule{cPickle} module.
Fred Drakeffbe6871999-04-22 21:23:22 +000028
Barry Warsawf595fd92001-11-15 23:39:07 +000029\subsection{Relationship to other Python modules}
Guido van Rossumd1883581995-02-15 15:53:08 +000030
Barry Warsawf595fd92001-11-15 23:39:07 +000031The \module{pickle} module has an optimized cousin called the
32\module{cPickle} module. As its name implies, \module{cPickle} is
33written in C, so it can be up to 1000 times faster than
34\module{pickle}. However it does not support subclassing of the
35\function{Pickler()} and \function{Unpickler()} classes, because in
36\module{cPickle} these are functions, not classes. Most applications
37have no need for this functionality, and can benefit from the improved
38performance of \module{cPickle}. Other than that, the interfaces of
39the two modules are nearly identical; the common interface is
40described in this manual and differences are pointed out where
41necessary. In the following discussions, we use the term ``pickle''
42to collectively describe the \module{pickle} and
43\module{cPickle} modules.
Guido van Rossum736fe5e1997-12-09 20:45:08 +000044
Barry Warsawf595fd92001-11-15 23:39:07 +000045The data streams the two modules produce are guaranteed to be
46interchangeable.
47
48Python has a more primitive serialization module called
Fred Drake2744f432001-11-26 21:30:36 +000049\refmodule{marshal}, but in general
Barry Warsawf595fd92001-11-15 23:39:07 +000050\module{pickle} should always be the preferred way to serialize Python
51objects. \module{marshal} exists primarily to support Python's
52\file{.pyc} files.
53
54The \module{pickle} module differs from \refmodule{marshal} several
55significant ways:
Guido van Rossumd1883581995-02-15 15:53:08 +000056
57\begin{itemize}
58
Barry Warsawf595fd92001-11-15 23:39:07 +000059\item The \module{pickle} module keeps track of the objects it has
60 already serialized, so that later references to the same object
61 won't be serialized again. \module{marshal} doesn't do this.
Guido van Rossumd1883581995-02-15 15:53:08 +000062
Barry Warsawf595fd92001-11-15 23:39:07 +000063 This has implications both for recursive objects and object
64 sharing. Recursive objects are objects that contain references
65 to themselves. These are not handled by marshal, and in fact,
66 attempting to marshal recursive objects will crash your Python
67 interpreter. Object sharing happens when there are multiple
68 references to the same object in different places in the object
69 hierarchy being serialized. \module{pickle} stores such objects
70 only once, and ensures that all other references point to the
71 master copy. Shared objects remain shared, which can be very
72 important for mutable objects.
Guido van Rossumd1883581995-02-15 15:53:08 +000073
Barry Warsawf595fd92001-11-15 23:39:07 +000074\item \module{marshal} cannot be used to serialize user-defined
75 classes and their instances. \module{pickle} can save and
76 restore class instances transparently, however the class
77 definition must be importable and live in the same module as
78 when the object was stored.
79
80\item The \module{marshal} serialization format is not guaranteed to
81 be portable across Python versions. Because its primary job in
82 life is to support \file{.pyc} files, the Python implementers
83 reserve the right to change the serialization format in
84 non-backwards compatible ways should the need arise. The
85 \module{pickle} serialization format is guaranteed to be
86 backwards compatible across Python releases.
87
88\item The \module{pickle} module doesn't handle code objects, which
89 the \module{marshal} module does. This avoids the possibility
90 of smuggling Trojan horses into a program through the
91 \module{pickle} module\footnote{This doesn't necessarily imply
92 that \module{pickle} is inherently secure. See
93 section~\ref{pickle-sec} for a more detailed discussion on
94 \module{pickle} module security. Besides, it's possible that
95 \module{pickle} will eventually support serializing code
96 objects.}.
Guido van Rossumd1883581995-02-15 15:53:08 +000097
98\end{itemize}
99
Barry Warsawf595fd92001-11-15 23:39:07 +0000100Note that serialization is a more primitive notion than persistence;
101although
102\module{pickle} reads and writes file objects, it does not handle the
103issue of naming persistent objects, nor the (even more complicated)
104issue of concurrent access to persistent objects. The \module{pickle}
105module can transform a complex object into a byte stream and it can
106transform the byte stream into an object with the same internal
107structure. Perhaps the most obvious thing to do with these byte
108streams is to write them onto a file, but it is also conceivable to
109send them across a network or store them in a database. The module
110\refmodule{shelve} provides a simple interface
111to pickle and unpickle objects on DBM-style database files.
112
113\subsection{Data stream format}
114
Fred Drake9b28fe21998-04-04 06:20:28 +0000115The data format used by \module{pickle} is Python-specific. This has
Guido van Rossumd1883581995-02-15 15:53:08 +0000116the advantage that there are no restrictions imposed by external
Barry Warsawf595fd92001-11-15 23:39:07 +0000117standards such as XDR\index{XDR}\index{External Data Representation}
118(which can't represent pointer sharing); however it means that
119non-Python programs may not be able to reconstruct pickled Python
120objects.
Guido van Rossumd1883581995-02-15 15:53:08 +0000121
Fred Drake9b28fe21998-04-04 06:20:28 +0000122By default, the \module{pickle} data format uses a printable \ASCII{}
Guido van Rossum736fe5e1997-12-09 20:45:08 +0000123representation. This is slightly more voluminous than a binary
124representation. The big advantage of using printable \ASCII{} (and of
Fred Drake9b28fe21998-04-04 06:20:28 +0000125some other characteristics of \module{pickle}'s representation) is that
Guido van Rossum736fe5e1997-12-09 20:45:08 +0000126for debugging or recovery purposes it is possible for a human to read
127the pickled file with a standard text editor.
128
129A binary format, which is slightly more efficient, can be chosen by
Barry Warsawf595fd92001-11-15 23:39:07 +0000130specifying a true value for the \var{bin} argument to the
Fred Drake9b28fe21998-04-04 06:20:28 +0000131\class{Pickler} constructor or the \function{dump()} and \function{dumps()}
Barry Warsawf595fd92001-11-15 23:39:07 +0000132functions.
Guido van Rossumd1883581995-02-15 15:53:08 +0000133
Barry Warsawf595fd92001-11-15 23:39:07 +0000134\subsection{Usage}
Guido van Rossumd1883581995-02-15 15:53:08 +0000135
Barry Warsawf595fd92001-11-15 23:39:07 +0000136To serialize an object hierarchy, you first create a pickler, then you
137call the pickler's \method{dump()} method. To de-serialize a data
138stream, you first create an unpickler, then you call the unpickler's
139\method{load()} method. The \module{pickle} module provides the
140following functions to make this process more convenient:
Guido van Rossumd1883581995-02-15 15:53:08 +0000141
Barry Warsawf595fd92001-11-15 23:39:07 +0000142\begin{funcdesc}{dump}{object, file\optional{, bin}}
143Write a pickled representation of \var{object} to the open file object
144\var{file}. This is equivalent to
145\code{Pickler(\var{file}, \var{bin}).dump(\var{object})}.
146If the optional \var{bin} argument is true, the binary pickle format
147is used; otherwise the (less efficient) text pickle format is used
148(for backwards compatibility, this is the default).
Guido van Rossumd1883581995-02-15 15:53:08 +0000149
Barry Warsawf595fd92001-11-15 23:39:07 +0000150\var{file} must have a \method{write()} method that accepts a single
151string argument. It can thus be a file object opened for writing, a
152\refmodule{StringIO} object, or any other custom
153object that meets this interface.
154\end{funcdesc}
Guido van Rossumd1883581995-02-15 15:53:08 +0000155
Barry Warsawf595fd92001-11-15 23:39:07 +0000156\begin{funcdesc}{load}{file}
157Read a string from the open file object \var{file} and interpret it as
158a pickle data stream, reconstructing and returning the original object
159hierarchy. This is equivalent to \code{Unpickler(\var{file}).load()}.
Guido van Rossum470be141995-03-17 16:07:09 +0000160
Barry Warsawf595fd92001-11-15 23:39:07 +0000161\var{file} must have two methods, a \method{read()} method that takes
162an integer argument, and a \method{readline()} method that requires no
163arguments. Both methods should return a string. Thus \var{file} can
164be a file object opened for reading, a
165\module{StringIO} object, or any other custom
166object that meets this interface.
Guido van Rossum736fe5e1997-12-09 20:45:08 +0000167
Barry Warsawf595fd92001-11-15 23:39:07 +0000168This function automatically determines whether the data stream was
169written in binary mode or not.
170\end{funcdesc}
Guido van Rossumd1883581995-02-15 15:53:08 +0000171
Barry Warsawf595fd92001-11-15 23:39:07 +0000172\begin{funcdesc}{dumps}{object\optional{, bin}}
173Return the pickled representation of the object as a string, instead
174of writing it to a file. If the optional \var{bin} argument is
175true, the binary pickle format is used; otherwise the (less efficient)
176text pickle format is used (this is the default).
177\end{funcdesc}
Guido van Rossumd1883581995-02-15 15:53:08 +0000178
Barry Warsawf595fd92001-11-15 23:39:07 +0000179\begin{funcdesc}{loads}{string}
180Read a pickled object hierarchy from a string. Characters in the
181string past the pickled object's representation are ignored.
182\end{funcdesc}
Guido van Rossumd1883581995-02-15 15:53:08 +0000183
Barry Warsawf595fd92001-11-15 23:39:07 +0000184The \module{pickle} module also defines three exceptions:
Guido van Rossum470be141995-03-17 16:07:09 +0000185
Barry Warsawf595fd92001-11-15 23:39:07 +0000186\begin{excdesc}{PickleError}
187A common base class for the other exceptions defined below. This
188inherits from \exception{Exception}.
189\end{excdesc}
Guido van Rossum470be141995-03-17 16:07:09 +0000190
Barry Warsawf595fd92001-11-15 23:39:07 +0000191\begin{excdesc}{PicklingError}
192This exception is raised when an unpicklable object is passed to
193the \method{dump()} method.
194\end{excdesc}
Guido van Rossumd1883581995-02-15 15:53:08 +0000195
Barry Warsawf595fd92001-11-15 23:39:07 +0000196\begin{excdesc}{UnpicklingError}
197This exception is raised when there is a problem unpickling an object,
198such as a security violation. Note that other exceptions may also be
199raised during unpickling, including (but not necessarily limited to)
200\exception{AttributeError} and \exception{ImportError}.
201\end{excdesc}
202
203The \module{pickle} module also exports two callables\footnote{In the
204\module{pickle} module these callables are classes, which you could
205subclass to customize the behavior. However, in the \module{cPickle}
206modules these callables are factory functions and so cannot be
207subclassed. One of the common reasons to subclass is to control what
208objects can actually be unpickled. See section~\ref{pickle-sec} for
209more details on security concerns.}, \class{Pickler} and
210\class{Unpickler}:
211
212\begin{classdesc}{Pickler}{file\optional{, bin}}
213This takes a file-like object to which it will write a pickle data
214stream. Optional \var{bin} if true, tells the pickler to use the more
215efficient binary pickle format, otherwise the \ASCII{} format is used
216(this is the default).
217
218\var{file} must have a \method{write()} method that accepts a single
219string argument. It can thus be an open file object, a
220\module{StringIO} object, or any other custom
221object that meets this interface.
222\end{classdesc}
223
224\class{Pickler} objects define one (or two) public methods:
225
226\begin{methoddesc}[Pickler]{dump}{object}
227Write a pickled representation of \var{object} to the open file object
228given in the constructor. Either the binary or \ASCII{} format will
229be used, depending on the value of the \var{bin} flag passed to the
230constructor.
231\end{methoddesc}
232
233\begin{methoddesc}[Pickler]{clear_memo}{}
234Clears the pickler's ``memo''. The memo is the data structure that
235remembers which objects the pickler has already seen, so that shared
236or recursive objects pickled by reference and not by value. This
237method is useful when re-using picklers.
238
239\strong{Note:} \method{clear_memo()} is only available on the picklers
240created by \module{cPickle}. In the \module{pickle} module, picklers
241have an instance variable called \member{memo} which is a Python
242dictionary. So to clear the memo for a \module{pickle} module
243pickler, you could do the following:
Guido van Rossumd1883581995-02-15 15:53:08 +0000244
Fred Drake19479911998-02-13 06:58:54 +0000245\begin{verbatim}
Barry Warsawf595fd92001-11-15 23:39:07 +0000246mypickler.memo.clear()
Fred Drake19479911998-02-13 06:58:54 +0000247\end{verbatim}
Barry Warsawf595fd92001-11-15 23:39:07 +0000248\end{methoddesc}
Fred Drake9b28fe21998-04-04 06:20:28 +0000249
Barry Warsawf595fd92001-11-15 23:39:07 +0000250It is possible to make multiple calls to the \method{dump()} method of
251the same \class{Pickler} instance. These must then be matched to the
252same number of calls to the \method{load()} method of the
253corresponding \class{Unpickler} instance. If the same object is
254pickled by multiple \method{dump()} calls, the \method{load()} will
255all yield references to the same object\footnote{\emph{Warning}: this
256is intended for pickling multiple objects without intervening
257modifications to the objects or their parts. If you modify an object
258and then pickle it again using the same \class{Pickler} instance, the
259object is not pickled again --- a reference to it is pickled and the
260\class{Unpickler} will return the old value, not the modified one.
261There are two problems here: (1) detecting changes, and (2)
262marshalling a minimal set of changes. Garbage Collection may also
263become a problem here.}.
Guido van Rossum470be141995-03-17 16:07:09 +0000264
Barry Warsawf595fd92001-11-15 23:39:07 +0000265\class{Unpickler} objects are defined as:
Fred Drake9b28fe21998-04-04 06:20:28 +0000266
Barry Warsawf595fd92001-11-15 23:39:07 +0000267\begin{classdesc}{Unpickler}{file}
268This takes a file-like object from which it will read a pickle data
269stream. This class automatically determines whether the data stream
270was written in binary mode or not, so it does not need a flag as in
271the \class{Pickler} factory.
Guido van Rossumd1883581995-02-15 15:53:08 +0000272
Barry Warsawf595fd92001-11-15 23:39:07 +0000273\var{file} must have two methods, a \method{read()} method that takes
274an integer argument, and a \method{readline()} method that requires no
275arguments. Both methods should return a string. Thus \var{file} can
276be a file object opened for reading, a
277\module{StringIO} object, or any other custom
278object that meets this interface.
279\end{classdesc}
Fred Drake9b28fe21998-04-04 06:20:28 +0000280
Barry Warsawf595fd92001-11-15 23:39:07 +0000281\class{Unpickler} objects have one (or two) public methods:
Guido van Rossum470be141995-03-17 16:07:09 +0000282
Barry Warsawf595fd92001-11-15 23:39:07 +0000283\begin{methoddesc}[Unpickler]{load}{}
284Read a pickled object representation from the open file object given
285in the constructor, and return the reconstituted object hierarchy
286specified therein.
287\end{methoddesc}
Fred Drake9b28fe21998-04-04 06:20:28 +0000288
Barry Warsawf595fd92001-11-15 23:39:07 +0000289\begin{methoddesc}[Unpickler]{noload}{}
290This is just like \method{load()} except that it doesn't actually
291create any objects. This is useful primarily for finding what's
292called ``persistent ids'' that may be referenced in a pickle data
293stream. See section~\ref{pickle-protocol} below for more details.
Guido van Rossumd1883581995-02-15 15:53:08 +0000294
Barry Warsawf595fd92001-11-15 23:39:07 +0000295\strong{Note:} the \method{noload()} method is currently only
296available on \class{Unpickler} objects created with the
297\module{cPickle} module. \module{pickle} module \class{Unpickler}s do
298not have the \method{noload()} method.
299\end{methoddesc}
300
301\subsection{What can be pickled and unpickled?}
Guido van Rossum736fe5e1997-12-09 20:45:08 +0000302
Guido van Rossumd1883581995-02-15 15:53:08 +0000303The following types can be pickled:
Fred Drake41796911999-07-02 14:25:37 +0000304
Guido van Rossumd1883581995-02-15 15:53:08 +0000305\begin{itemize}
306
307\item \code{None}
308
Barry Warsawf595fd92001-11-15 23:39:07 +0000309\item integers, long integers, floating point numbers, complex numbers
Guido van Rossumd1883581995-02-15 15:53:08 +0000310
Fred Drake56ced2a2000-04-06 15:04:30 +0000311\item normal and Unicode strings
Guido van Rossumd1883581995-02-15 15:53:08 +0000312
Barry Warsawf595fd92001-11-15 23:39:07 +0000313\item tuples, lists, and dictionaries containing only picklable objects
Guido van Rossumd1883581995-02-15 15:53:08 +0000314
Barry Warsawf595fd92001-11-15 23:39:07 +0000315\item functions defined at the top level of a module
Fred Drake38e5d272000-04-03 20:13:55 +0000316
Barry Warsawf595fd92001-11-15 23:39:07 +0000317\item built-in functions defined at the top level of a module
Fred Drake38e5d272000-04-03 20:13:55 +0000318
Barry Warsawf595fd92001-11-15 23:39:07 +0000319\item classes that are defined at the top level of a module
Guido van Rossum470be141995-03-17 16:07:09 +0000320
Fred Drake9b28fe21998-04-04 06:20:28 +0000321\item instances of such classes whose \member{__dict__} or
Barry Warsawf595fd92001-11-15 23:39:07 +0000322\method{__setstate__()} is picklable (see
323section~\ref{pickle-protocol} for details)
Guido van Rossumd1883581995-02-15 15:53:08 +0000324
325\end{itemize}
326
Guido van Rossum470be141995-03-17 16:07:09 +0000327Attempts to pickle unpicklable objects will raise the
Fred Drake9b28fe21998-04-04 06:20:28 +0000328\exception{PicklingError} exception; when this happens, an unspecified
Barry Warsawf595fd92001-11-15 23:39:07 +0000329number of bytes may have already been written to the underlying file.
Guido van Rossumd1883581995-02-15 15:53:08 +0000330
Barry Warsawf595fd92001-11-15 23:39:07 +0000331Note that functions (built-in and user-defined) are pickled by ``fully
332qualified'' name reference, not by value. This means that only the
333function name is pickled, along with the name of module the function
334is defined in. Neither the function's code, nor any of its function
335attributes are pickled. Thus the defining module must be importable
336in the unpickling environment, and the module must contain the named
337object, otherwise an exception will be raised\footnote{The exception
338raised will likely be an \exception{ImportError} or an
339\exception{AttributeError} but it could be something else.}.
Guido van Rossum470be141995-03-17 16:07:09 +0000340
Barry Warsawf595fd92001-11-15 23:39:07 +0000341Similarly, classes are pickled by named reference, so the same
342restrictions in the unpickling environment apply. Note that none of
343the class's code or data is pickled, so in the following example the
344class attribute \code{attr} is not restored in the unpickling
345environment:
Guido van Rossum470be141995-03-17 16:07:09 +0000346
Barry Warsawf595fd92001-11-15 23:39:07 +0000347\begin{verbatim}
348class Foo:
349 attr = 'a class attr'
Guido van Rossum470be141995-03-17 16:07:09 +0000350
Barry Warsawf595fd92001-11-15 23:39:07 +0000351picklestring = pickle.dumps(Foo)
352\end{verbatim}
Guido van Rossum470be141995-03-17 16:07:09 +0000353
Barry Warsawf595fd92001-11-15 23:39:07 +0000354These restrictions are why picklable functions and classes must be
355defined in the top level of a module.
Guido van Rossum470be141995-03-17 16:07:09 +0000356
Barry Warsawf595fd92001-11-15 23:39:07 +0000357Similarly, when class instances are pickled, their class's code and
358data are not pickled along with them. Only the instance data are
359pickled. This is done on purpose, so you can fix bugs in a class or
360add methods to the class and still load objects that were created with
361an earlier version of the class. If you plan to have long-lived
362objects that will see many versions of a class, it may be worthwhile
363to put a version number in the objects so that suitable conversions
364can be made by the class's \method{__setstate__()} method.
Guido van Rossum470be141995-03-17 16:07:09 +0000365
Barry Warsawf595fd92001-11-15 23:39:07 +0000366\subsection{The pickle protocol
367\label{pickle-protocol}}\setindexsubitem{(pickle protocol)}
Fred Drake40748961998-03-06 21:27:14 +0000368
Barry Warsawf595fd92001-11-15 23:39:07 +0000369This section describes the ``pickling protocol'' that defines the
370interface between the pickler/unpickler and the objects that are being
371serialized. This protocol provides a standard way for you to define,
372customize, and control how your objects are serialized and
373de-serialized. The description in this section doesn't cover specific
374customizations that you can employ to make the unpickling environment
375safer from untrusted pickle data streams; see section~\ref{pickle-sec}
376for more details.
Fred Drake40748961998-03-06 21:27:14 +0000377
Barry Warsawf595fd92001-11-15 23:39:07 +0000378\subsubsection{Pickling and unpickling normal class
379 instances\label{pickle-inst}}
Fred Drake9b28fe21998-04-04 06:20:28 +0000380
Barry Warsawf595fd92001-11-15 23:39:07 +0000381When a pickled class instance is unpickled, its \method{__init__()}
382method is normally \emph{not} invoked. If it is desirable that the
383\method{__init__()} method be called on unpickling, a class can define
384a method \method{__getinitargs__()}, which should return a
385\emph{tuple} containing the arguments to be passed to the class
386constructor (i.e. \method{__init__()}). The
387\method{__getinitargs__()} method is called at
388pickle time; the tuple it returns is incorporated in the pickle for
389the instance.
390\withsubitem{(copy protocol)}{\ttindex{__getinitargs__()}}
391\withsubitem{(instance constructor)}{\ttindex{__init__()}}
Fred Drake17e56401998-04-11 20:43:51 +0000392
Barry Warsawf595fd92001-11-15 23:39:07 +0000393\withsubitem{(copy protocol)}{
394 \ttindex{__getstate__()}\ttindex{__setstate__()}}
395\withsubitem{(instance attribute)}{
396 \ttindex{__dict__}}
Fred Drake17e56401998-04-11 20:43:51 +0000397
Barry Warsawf595fd92001-11-15 23:39:07 +0000398Classes can further influence how their instances are pickled; if the
399class defines the method \method{__getstate__()}, it is called and the
400return state is pickled as the contents for the instance, instead of
401the contents of the instance's dictionary. If there is no
402\method{__getstate__()} method, the instance's \member{__dict__} is
403pickled.
Fred Drake9463de21998-04-11 20:05:43 +0000404
Barry Warsawf595fd92001-11-15 23:39:07 +0000405Upon unpickling, if the class also defines the method
406\method{__setstate__()}, it is called with the unpickled
407state\footnote{These methods can also be used to implement copying
408class instances.}. If there is no \method{__setstate__()} method, the
409pickled object must be a dictionary and its items are assigned to the
410new instance's dictionary. If a class defines both
411\method{__getstate__()} and \method{__setstate__()}, the state object
412needn't be a dictionary and these methods can do what they
413want\footnote{This protocol is also used by the shallow and deep
414copying operations defined in the
415\refmodule{copy} module.}.
416
417\subsubsection{Pickling and unpickling extension types}
418
419When the \class{Pickler} encounters an object of a type it knows
420nothing about --- such as an extension type --- it looks in two places
421for a hint of how to pickle it. One alternative is for the object to
422implement a \method{__reduce__()} method. If provided, at pickling
423time \method{__reduce__()} will be called with no arguments, and it
424must return either a string or a tuple.
425
426If a string is returned, it names a global variable whose contents are
427pickled as normal. When a tuple is returned, it must be of length two
428or three, with the following semantics:
429
430\begin{itemize}
431
432\item A callable object, which in the unpickling environment must be
433 either a class, a callable registered as a ``safe constructor''
434 (see below), or it must have an attribute
435 \member{__safe_for_unpickling__} with a true value. Otherwise,
436 an \exception{UnpicklingError} will be raised in the unpickling
437 environment. Note that as usual, the callable itself is pickled
438 by name.
439
440\item A tuple of arguments for the callable object, or \code{None}.
441
442\item Optionally, the object's state, which will be passed to
443 the object's \method{__setstate__()} method as described in
444 section~\ref{pickle-inst}. If the object has no
445 \method{__setstate__()} method, then, as above, the value must
446 be a dictionary and it will be added to the object's
447 \member{__dict__}.
448
449\end{itemize}
450
451Upon unpickling, the callable will be called (provided that it meets
452the above criteria), passing in the tuple of arguments; it should
453return the unpickled object. If the second item was \code{None}, then
454instead of calling the callable directly, its \method{__basicnew__()}
455method is called without arguments. It should also return the
456unpickled object.
457
458An alternative to implementing a \method{__reduce__()} method on the
459object to be pickled, is to register the callable with the
Fred Drake2744f432001-11-26 21:30:36 +0000460\refmodule[copyreg]{copy_reg} module. This module provides a way
Barry Warsawf595fd92001-11-15 23:39:07 +0000461for programs to register ``reduction functions'' and constructors for
462user-defined types. Reduction functions have the same semantics and
463interface as the \method{__reduce__()} method described above, except
464that they are called with a single argument, the object to be pickled.
465
466The registered constructor is deemed a ``safe constructor'' for purposes
467of unpickling as described above.
468
469\subsubsection{Pickling and unpickling external objects}
470
471For the benefit of object persistence, the \module{pickle} module
472supports the notion of a reference to an object outside the pickled
473data stream. Such objects are referenced by a ``persistent id'',
474which is just an arbitrary string of printable \ASCII{} characters.
475The resolution of such names is not defined by the \module{pickle}
476module; it will delegate this resolution to user defined functions on
477the pickler and unpickler\footnote{The actual mechanism for
478associating these user defined functions is slightly different for
479\module{pickle} and \module{cPickle}. The description given here
480works the same for both implementations. Users of the \module{pickle}
481module could also use subclassing to effect the same results,
482overriding the \method{persistent_id()} and \method{persistent_load()}
483methods in the derived classes.}.
484
485To define external persistent id resolution, you need to set the
486\member{persistent_id} attribute of the pickler object and the
487\member{persistent_load} attribute of the unpickler object.
488
489To pickle objects that have an external persistent id, the pickler
490must have a custom \function{persistent_id()} method that takes an
491object as an argument and returns either \code{None} or the persistent
492id for that object. When \code{None} is returned, the pickler simply
493pickles the object as normal. When a persistent id string is
494returned, the pickler will pickle that string, along with a marker
495so that the unpickler will recognize the string as a persistent id.
496
497To unpickle external objects, the unpickler must have a custom
498\function{persistent_load()} function that takes a persistent id
499string and returns the referenced object.
500
501Here's a silly example that \emph{might} shed more light:
502
503\begin{verbatim}
504import pickle
505from cStringIO import StringIO
506
507src = StringIO()
508p = pickle.Pickler(src)
509
510def persistent_id(obj):
511 if hasattr(obj, 'x'):
512 return 'the value %d' % obj.x
513 else:
514 return None
515
516p.persistent_id = persistent_id
517
518class Integer:
519 def __init__(self, x):
520 self.x = x
521 def __str__(self):
522 return 'My name is integer %d' % self.x
523
524i = Integer(7)
525print i
526p.dump(i)
527
528datastream = src.getvalue()
529print repr(datastream)
530dst = StringIO(datastream)
531
532up = pickle.Unpickler(dst)
533
534class FancyInteger(Integer):
535 def __str__(self):
536 return 'I am the integer %d' % self.x
537
538def persistent_load(persid):
539 if persid.startswith('the value '):
540 value = int(persid.split()[2])
541 return FancyInteger(value)
542 else:
543 raise pickle.UnpicklingError, 'Invalid persistent id'
544
545up.persistent_load = persistent_load
546
547j = up.load()
548print j
549\end{verbatim}
550
551In the \module{cPickle} module, the unpickler's
552\member{persistent_load} attribute can also be set to a Python
553list, in which case, when the unpickler reaches a persistent id, the
554persistent id string will simply be appended to this list. This
555functionality exists so that a pickle data stream can be ``sniffed''
556for object references without actually instantiating all the objects
557in a pickle\footnote{We'll leave you with the image of Guido and Jim
558sitting around sniffing pickles in their living rooms.}. Setting
559\member{persistent_load} to a list is usually used in conjunction with
560the \method{noload()} method on the Unpickler.
561
562% BAW: Both pickle and cPickle support something called
563% inst_persistent_id() which appears to give unknown types a second
564% shot at producing a persistent id. Since Jim Fulton can't remember
565% why it was added or what it's for, I'm leaving it undocumented.
566
567\subsection{Security \label{pickle-sec}}
568
569Most of the security issues surrounding the \module{pickle} and
570\module{cPickle} module involve unpickling. There are no known
571security vulnerabilities
572related to pickling because you (the programmer) control the objects
573that \module{pickle} will interact with, and all it produces is a
574string.
575
576However, for unpickling, it is \strong{never} a good idea to unpickle
577an untrusted string whose origins are dubious, for example, strings
578read from a socket. This is because unpickling can create unexpected
579objects and even potentially run methods of those objects, such as
580their class constructor or destructor\footnote{A special note of
581caution is worth raising about the \refmodule{Cookie}
582module. By default, the \class{Cookie.Cookie} class is an alias for
583the \class{Cookie.SmartCookie} class, which ``helpfully'' attempts to
584unpickle any cookie data string it is passed. This is a huge security
585hole because cookie data typically comes from an untrusted source.
586You should either explicitly use the \class{Cookie.SimpleCookie} class
587--- which doesn't attempt to unpickle its string --- or you should
588implement the defensive programming steps described later on in this
589section.}.
590
591You can defend against this by customizing your unpickler so that you
592can control exactly what gets unpickled and what gets called.
593Unfortunately, exactly how you do this is different depending on
594whether you're using \module{pickle} or \module{cPickle}.
595
596One common feature that both modules implement is the
597\member{__safe_for_unpickling__} attribute. Before calling a callable
598which is not a class, the unpickler will check to make sure that the
599callable has either been registered as a safe callable via the
Fred Drake2744f432001-11-26 21:30:36 +0000600\refmodule[copyreg]{copy_reg} module, or that it has an
Barry Warsawf595fd92001-11-15 23:39:07 +0000601attribute \member{__safe_for_unpickling__} with a true value. This
602prevents the unpickling environment from being tricked into doing
603evil things like call \code{os.unlink()} with an arbitrary file name.
604See section~\ref{pickle-protocol} for more details.
605
606For safely unpickling class instances, you need to control exactly
Barry Warsaw69ab5832001-11-18 16:24:01 +0000607which classes will get created. Be aware that a class's constructor
608could be called (if the pickler found a \method{__getinitargs__()}
609method) and the the class's destructor (i.e. its \method{__del__()} method)
610might get called when the object is garbage collected. Depending on
611the class, it isn't very heard to trick either method into doing bad
612things, such as removing a file. The way to
Barry Warsawf595fd92001-11-15 23:39:07 +0000613control the classes that are safe to instantiate differs in
614\module{pickle} and \module{cPickle}\footnote{A word of caution: the
615mechanisms described here use internal attributes and methods, which
616are subject to change in future versions of Python. We intend to
617someday provide a common interface for controlling this behavior,
618which will work in either \module{pickle} or \module{cPickle}.}.
619
620In the \module{pickle} module, you need to derive a subclass from
621\class{Unpickler}, overriding the \method{load_global()}
622method. \method{load_global()} should read two lines from the pickle
623data stream where the first line will the the name of the module
624containing the class and the second line will be the name of the
625instance's class. It then look up the class, possibly importing the
626module and digging out the attribute, then it appends what it finds to
627the unpickler's stack. Later on, this class will be assigned to the
628\member{__class__} attribute of an empty class, as a way of magically
629creating an instance without calling its class's \method{__init__()}.
630You job (should you choose to accept it), would be to have
631\method{load_global()} push onto the unpickler's stack, a known safe
632version of any class you deem safe to unpickle. It is up to you to
633produce such a class. Or you could raise an error if you want to
634disallow all unpickling of instances. If this sounds like a hack,
635you're right. UTSL.
636
637Things are a little cleaner with \module{cPickle}, but not by much.
638To control what gets unpickled, you can set the unpickler's
639\member{find_global} attribute to a function or \code{None}. If it is
640\code{None} then any attempts to unpickle instances will raise an
641\exception{UnpicklingError}. If it is a function,
642then it should accept a module name and a class name, and return the
643corresponding class object. It is responsible for looking up the
644class, again performing any necessary imports, and it may raise an
645error to prevent instances of the class from being unpickled.
646
647The moral of the story is that you should be really careful about the
648source of the strings your application unpickles.
Fred Drake9463de21998-04-11 20:05:43 +0000649
Fred Drake38e5d272000-04-03 20:13:55 +0000650\subsection{Example \label{pickle-example}}
651
652Here's a simple example of how to modify pickling behavior for a
653class. The \class{TextReader} class opens a text file, and returns
654the line number and line contents each time its \method{readline()}
655method is called. If a \class{TextReader} instance is pickled, all
656attributes \emph{except} the file object member are saved. When the
657instance is unpickled, the file is reopened, and reading resumes from
658the last location. The \method{__setstate__()} and
659\method{__getstate__()} methods are used to implement this behavior.
660
661\begin{verbatim}
Fred Drake38e5d272000-04-03 20:13:55 +0000662class TextReader:
Fred Drakec8252802001-09-25 16:29:17 +0000663 """Print and number lines in a text file."""
664 def __init__(self, file):
Fred Drake38e5d272000-04-03 20:13:55 +0000665 self.file = file
Fred Drakec8252802001-09-25 16:29:17 +0000666 self.fh = open(file)
Fred Drake38e5d272000-04-03 20:13:55 +0000667 self.lineno = 0
668
669 def readline(self):
670 self.lineno = self.lineno + 1
671 line = self.fh.readline()
672 if not line:
673 return None
Fred Drakec8252802001-09-25 16:29:17 +0000674 if line.endswith("\n"):
675 line = line[:-1]
676 return "%d: %s" % (self.lineno, line)
Fred Drake38e5d272000-04-03 20:13:55 +0000677
Fred Drake38e5d272000-04-03 20:13:55 +0000678 def __getstate__(self):
Fred Drakec8252802001-09-25 16:29:17 +0000679 odict = self.__dict__.copy() # copy the dict since we change it
680 del odict['fh'] # remove filehandle entry
Fred Drake38e5d272000-04-03 20:13:55 +0000681 return odict
682
Fred Drake38e5d272000-04-03 20:13:55 +0000683 def __setstate__(self,dict):
Fred Drakec8252802001-09-25 16:29:17 +0000684 fh = open(dict['file']) # reopen file
685 count = dict['lineno'] # read from file...
686 while count: # until line count is restored
Fred Drake38e5d272000-04-03 20:13:55 +0000687 fh.readline()
688 count = count - 1
Fred Drakec8252802001-09-25 16:29:17 +0000689 self.__dict__.update(dict) # update attributes
690 self.fh = fh # save the file object
Fred Drake38e5d272000-04-03 20:13:55 +0000691\end{verbatim}
692
693A sample usage might be something like this:
694
695\begin{verbatim}
696>>> import TextReader
697>>> obj = TextReader.TextReader("TextReader.py")
698>>> obj.readline()
699'1: #!/usr/local/bin/python'
700>>> # (more invocations of obj.readline() here)
701... obj.readline()
702'7: class TextReader:'
703>>> import pickle
704>>> pickle.dump(obj,open('save.p','w'))
Fred Drakec8252802001-09-25 16:29:17 +0000705\end{verbatim}
Fred Drake38e5d272000-04-03 20:13:55 +0000706
Fred Drakec8252802001-09-25 16:29:17 +0000707If you want to see that \refmodule{pickle} works across Python
708processes, start another Python session, before continuing. What
709follows can happen from either the same process or a new process.
Fred Drake38e5d272000-04-03 20:13:55 +0000710
Fred Drakec8252802001-09-25 16:29:17 +0000711\begin{verbatim}
Fred Drake38e5d272000-04-03 20:13:55 +0000712>>> import pickle
713>>> reader = pickle.load(open('save.p'))
714>>> reader.readline()
715'8: "Print and number lines in a text file."'
716\end{verbatim}
717
718
Barry Warsawf595fd92001-11-15 23:39:07 +0000719\begin{seealso}
720 \seemodule[copyreg]{copy_reg}{Pickle interface constructor
721 registration for extension types.}
722
723 \seemodule{shelve}{Indexed databases of objects; uses \module{pickle}.}
724
725 \seemodule{copy}{Shallow and deep object copying.}
726
727 \seemodule{marshal}{High-performance serialization of built-in types.}
728\end{seealso}
729
730
731\section{\module{cPickle} --- A faster \module{pickle}}
Fred Drakeffbe6871999-04-22 21:23:22 +0000732
Fred Drakeb91e9341998-07-23 17:59:49 +0000733\declaremodule{builtin}{cPickle}
Fred Drake38e5d272000-04-03 20:13:55 +0000734\modulesynopsis{Faster version of \refmodule{pickle}, but not subclassable.}
Fred Drakeffbe6871999-04-22 21:23:22 +0000735\moduleauthor{Jim Fulton}{jfulton@digicool.com}
736\sectionauthor{Fred L. Drake, Jr.}{fdrake@acm.org}
Fred Drakeb91e9341998-07-23 17:59:49 +0000737
Barry Warsawf595fd92001-11-15 23:39:07 +0000738The \module{cPickle} module supports serialization and
739de-serialization of Python objects, providing an interface and
740functionality nearly identical to the
741\refmodule{pickle}\refstmodindex{pickle} module. There are several
742differences, the most important being performance and subclassability.
Fred Drake9463de21998-04-11 20:05:43 +0000743
Barry Warsawf595fd92001-11-15 23:39:07 +0000744First, \module{cPickle} can be up to 1000 times faster than
745\module{pickle} because the former is implemented in C. Second, in
746the \module{cPickle} module the callables \function{Pickler()} and
747\function{Unpickler()} are functions, not classes. This means that
748you cannot use them to derive custom pickling and unpickling
749subclasses. Most applications have no need for this functionality and
750should benefit from the greatly improved performance of the
751\module{cPickle} module.
Fred Drake9463de21998-04-11 20:05:43 +0000752
Barry Warsawf595fd92001-11-15 23:39:07 +0000753The pickle data stream produced by \module{pickle} and
754\module{cPickle} are identical, so it is possible to use
755\module{pickle} and \module{cPickle} interchangeably with existing
756pickles\footnote{Since the pickle data format is actually a tiny
757stack-oriented programming language, and some freedom is taken in the
758encodings of certain objects, it is possible that the two modules
759produce different data streams for the same input objects. However it
760is guaranteed that they will always be able to read each other's
761data streams.}.
Guido van Rossumcf3ce921999-01-06 23:34:39 +0000762
Barry Warsawf595fd92001-11-15 23:39:07 +0000763There are additional minor differences in API between \module{cPickle}
764and \module{pickle}, however for most applications, they are
765interchangable. More documentation is provided in the
766\module{pickle} module documentation, which
767includes a list of the documented differences.
768
769