pickle: Replace exec() with eval(), smaller surface for security issues.

pfalcon · pfalcon · commit 4328dde8f85d · 2018-01-21T14:42:49.000+02:00
diff --git a/pickle/pickle.py b/pickle/pickle.py
@@ -18,5 +18,4 @@ def loads(s):
             pkg = qualname.rsplit(".", 1)[0]
             mod = __import__(pkg)
             d[pkg] = mod
-    exec("v=" + s, d)
-    return d["v"]
+    return eval(s, d)
