sonic-buildimage/device/delta/x86_64-delta_et-c032if-r0/plugins/psuutil.py
Mai Bui ea101a90d5
[device/delta] Mitigation for command injection vulnerability (#11865)
#### Why I did it
`os` execution functions are not secure against maliciously constructed input.
#### How I did it
Use `subprocess` module
2022-10-13 21:11:51 -07:00

78 lines
2.4 KiB
Python

#
# Module contains an implementation of SONiC PSU Base API and
# provides the PSUs status which are available in the platform
#
import subprocess
try:
from sonic_psu.psu_base import PsuBase
except ImportError as e:
raise ImportError(str(e) + "- required module not found")
class PsuUtil(PsuBase):
"""Platform-specific PSUutil class"""
def __init__(self):
PsuBase.__init__(self)
self.psu_status = ["ipmitool", "raw", "0x38", "0x1", "", "0x50"]
def get_num_psus(self):
"""
Retrieves the number of PSUs available on the device
:return: An integer, the number of PSUs available on the device
"""
return 2
def get_psu_status(self, index):
"""
Retrieves the oprational status of power supply unit (PSU) defined
by 1-based index <index>
:param index: An integer, 1-based index of the PSU of which to query status
:return: Boolean, True if PSU is operating properly, False if PSU is faulty
"""
if index is None:
return False
status = 0
cmd = ["ipmitool", "raw", "0x38", "0x2", "7", "0x32", "0x28", "1"]
try:
p = subprocess.Popen(cmd, stdout=subprocess.PIPE, universal_newlines=True)
content = p.stdout.readline().rstrip()
reg_value = int(content, 16)
mask = (1 << (8 - index))
if reg_value & mask == 0:
return False
status = 1
p.close()
except IOError:
return False
return status == 1
def get_psu_presence(self, index):
"""
Retrieves the presence status of power supply unit (PSU) defined
by 1-based index <index>
:param index: An integer, 1-based index of the PSU of which to query status
:return: Boolean, True if PSU is plugged, False if not
"""
if index is None:
return False
status = 0
self.psu_status[4] = str(index-1)
try:
p = subprocess.Popen(self.psu_status, stdout=subprocess.PIPE, universal_newlines=True)
content = p.stdout.readline().rstrip()
reg_value = int(content, 16)
if reg_value != 0:
return False
status = 1
p.close()
except IOError:
return False
return status == 1