matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
2f490626a9
sonic-buildimage/platform/broadcom
History
Mai Bui 6f67a3ac6a
[device/quanta] Mitigation for security vulnerability (#11867) 
Signed-off-by: maipbui <maibui@microsoft.com>
Dependency: [https://github.com/sonic-net/sonic-buildimage/pull/12065](https://github.com/sonic-net/sonic-buildimage/pull/12065)
#### Why I did it
`shell=True` is dangerous because this call will spawn the command using a shell process
`os` - not secure against maliciously constructed input and dangerous if used to evaluate dynamic content.
#### How I did it
`os` - use with `subprocess`
Use `shell=False` with shell features
- redirection: [https://stackoverflow.com/questions/4965159/how-to-redirect-output-with-subprocess-in-python/6482200#6482200?newreg=53afb91b3ebd47c5930be627fcdf2930](https://stackoverflow.com/questions/4965159/how-to-redirect-output-with-subprocess-in-python/6482200#6482200?newreg=53afb91b3ebd47c5930be627fcdf2930)
- `|` operator: [https://docs.python.org/2/library/subprocess.html#replacing-shell-pipeline](https://docs.python.org/2/library/subprocess.html#replacing-shell-pipeline)
2022-10-19 10:05:36 -04:00
..
docker-saiserver-brcm [SAIServer] support saiserver v2 in bullseye (#11849) 2022-08-25 22:51:53 -07:00
docker-syncd-brcm Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
docker-syncd-brcm-dnx Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
docker-syncd-brcm-dnx-rpc Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
docker-syncd-brcm-rpc Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
saibcm-modules Update BRCM KNET modules to support new psample definitions from sflow… (#11709) 2022-08-16 11:46:03 -07:00
saibcm-modules-dnx@65bce4ea83 Update BRCM KNET modules to support new psample definitions from sflow… (#11709) 2022-08-16 11:46:03 -07:00
sonic-platform-modules-accton [AS9716-32D] Support i2c mux reset (#10492) 2022-04-09 10:51:49 -07:00
sonic-platform-modules-alphanetworks [Alphanetworks] Add new platform BES2348T (#11196) 2022-09-15 21:34:52 -07:00
sonic-platform-modules-arista@11180c37fa [Arista] Update platform submodules (#12225) 2022-09-30 16:03:40 +08:00
sonic-platform-modules-brcm-xlr-gts [broadcom] Replace popen function (#12106) 2022-10-10 10:12:26 -04:00
sonic-platform-modules-cel Enable swap for haliburton device. (#11746) 2022-09-22 13:57:52 +08:00
sonic-platform-modules-dell Z9432F kernel dependency of platform module (#11941) 2022-09-01 16:55:41 -07:00
sonic-platform-modules-delta [sonic-linux-kernel]: security update to kernel 4.19.152 (#6490) 2021-02-06 21:02:06 -08:00
sonic-platform-modules-ingrasys [platform-modules]: fix compile issues for platform driver under 4.19 2020-04-17 04:51:51 +00:00
sonic-platform-modules-inventec [inventec] Replace os.system and remove subprocess with shell=True (#12108) 2022-10-14 10:21:44 -04:00
sonic-platform-modules-juniper Update SAI modules for Nokia and Juniper for Bullseye and 5.10 kernel 2021-11-10 15:27:22 -08:00
sonic-platform-modules-mitac [sonic-linux-kernel]: security update to kernel 4.19.152 (#6490) 2021-02-06 21:02:06 -08:00
sonic-platform-modules-nokia@5ebea4ba7e [Nokia] Update the nokia platform submodule for Nokia-IXR7250E platform (#12305) 2022-10-10 18:49:51 -07:00
sonic-platform-modules-quanta [device/quanta] Mitigation for security vulnerability (#11867) 2022-10-19 10:05:36 -04:00
sonic-platform-modules-ragile [ragile] support 32c and 4s platform (#8824) 2021-11-17 23:49:06 -08:00
sonic-platform-modules-ruijie [SFP-Refactor] Modify transceiver key name (#9447) 2021-12-09 12:38:45 +05:30
docker-pde.dep [PDE]: introduce the SONiC Platform Development Env (#7510) 2021-07-24 16:24:43 -07:00
docker-pde.mk PDE migration to bullseye (#10836) 2022-07-13 11:58:47 -07:00
docker-saiserver-brcm.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
docker-saiserver-brcm.mk Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
docker-syncd-brcm-dnx-rpc.dep New sonic-buildimage images for Broadcom DNX ASIC family. (#7598) 2021-06-22 11:12:22 -07:00
docker-syncd-brcm-dnx-rpc.mk Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
docker-syncd-brcm-dnx.dep New sonic-buildimage images for Broadcom DNX ASIC family. (#7598) 2021-06-22 11:12:22 -07:00
docker-syncd-brcm-dnx.mk Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
docker-syncd-brcm-rpc.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
docker-syncd-brcm-rpc.mk Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
docker-syncd-brcm.dep [build]: Fix syncd dpkg cache dependency issue (#6680) 2021-02-04 09:03:14 -08:00
docker-syncd-brcm.mk Upgrade broadcom platform containers(syncd/ saiserver/ syncd-rpc/ syncd-dnx-rpc) to bullseye (#10864) 2022-06-27 13:54:08 -07:00
libsaithrift-dev.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
libsaithrift-dev.mk [bcm sai] upgrade Broadcom SAI to 7.1.0.0-5 (#11236) 2022-06-23 15:34:51 -07:00
one-aboot.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
one-aboot.mk [Arista] Update driver submodules (#9393) 2021-12-08 11:33:36 -08:00
one-image.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
one-image.mk [Alphanetworks] Add new platform BES2348T (#11196) 2022-09-15 21:34:52 -07:00
platform-modules-accton.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-accton.mk Fix for Accton platform build failure when doing incremental build (#10541) 2022-05-09 12:17:38 -07:00
platform-modules-alphanetworks.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-alphanetworks.mk [Alphanetworks] Add new platform BES2348T (#11196) 2022-09-15 21:34:52 -07:00
platform-modules-arista.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-arista.mk [Arista] Update driver submodules (#9393) 2021-12-08 11:33:36 -08:00
platform-modules-brcm-xlr-gts.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-brcm-xlr-gts.mk [build]: add buster docker as the last step of the build proces 2020-04-16 10:26:18 +00:00
platform-modules-cel.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-cel.mk Sync platform-modules-belgite deb's kernel version 5.10.0-8-2 with master runtime kernel version 5.10.0-12-2 (#10946) 2022-08-18 12:56:04 +08:00
platform-modules-dell.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-dell.mk DellEMC: Initial commit for Z9432F platform (#10640) 2022-06-15 09:39:41 -07:00
platform-modules-delta.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-delta.mk [platform/delta]: Add a new supported platform, Delta-agc032 (#4602) 2020-05-27 09:33:02 -07:00
platform-modules-ingrasys.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-ingrasys.mk [build]: add buster docker as the last step of the build proces 2020-04-16 10:26:18 +00:00
platform-modules-inventec.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-inventec.mk [Inventec] Add support for D6332 platform (#5304) 2020-10-20 11:37:16 -07:00
platform-modules-juniper.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-juniper.mk [build]: add buster docker as the last step of the build proces 2020-04-16 10:26:18 +00:00
platform-modules-mitac.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-mitac.mk [build]: add buster docker as the last step of the build proces 2020-04-16 10:26:18 +00:00
platform-modules-nokia.dep Added Nokia IXR7250E support (#7809) 2021-08-17 12:26:04 -07:00
platform-modules-nokia.mk Added Nokia IXR7250E support (#7809) 2021-08-17 12:26:04 -07:00
platform-modules-quanta.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform-modules-quanta.mk [Quanta] Add and update platform and device files (#6971) 2021-06-21 09:24:41 -07:00
platform-modules-ragile.dep [Platform/Ragile] Support RA-B6510-48v8c platform (#7620) 2021-06-03 10:51:01 -07:00
platform-modules-ragile.mk [ragile] support 32c and 4s platform (#8824) 2021-11-17 23:49:06 -08:00
platform-modules-ruijie.dep [Ruijie] Add ruijie platform & device (#4954) 2021-02-24 16:45:27 -08:00
platform-modules-ruijie.mk [Ruijie] Add ruijie platform & device (#4954) 2021-02-24 16:45:27 -08:00
platform-modules-s6000.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
platform.conf one image implementation (#215) 2017-01-29 11:33:33 -08:00
raw-image.dep [build]: support for DPKG local caching (#4117) 2020-03-11 20:04:52 -07:00
raw-image.mk Flashrom refactoring for broadcom platforms (#7693) 2021-06-22 15:29:21 -07:00
rules.dep [gbsyncd] Build docker-gbsyncd-broncos image (#11748) 2022-08-23 12:38:08 +08:00
rules.mk [Alphanetworks] Add new platform BES2348T (#11196) 2022-09-15 21:34:52 -07:00
sai-modules.dep [build]: Update the make cache mode for opennsl-module-dnx (#8391) 2021-08-10 07:27:01 -07:00
sai-modules.mk [sonic-sairedis update] Support for SAI header v1.10.2 with BRCM SAI v7.1.0.0 and MLNX SAI v1.21.1.0 (#10583) 2022-05-05 20:27:29 -07:00
sai.dep [bcm sai] upgrade Broadcom SAI to 7.1.0.0-5 (#11236) 2022-06-23 15:34:51 -07:00
sai.mk Updated BRCM SAI to version 7.1.10.4 (#12423) 2022-10-17 15:22:53 -07:00
sonic-pde-tests.dep [PDE]: introduce the SONiC Platform Development Env (#7510) 2021-07-24 16:24:43 -07:00
sonic-pde-tests.mk [bcm sai] upgrade Broadcom SAI to 7.1.0.0-5 (#11236) 2022-06-23 15:34:51 -07:00