matthew/sonic-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
This repository has been archived on 2025-03-20. You can view files and clone it, but cannot push or open issues or pull requests.
aaeafa8411
sonic-buildimage/device
History
Mai Bui 2b3e884209
[nokia] Replace os.system and remove subprocess with shell=True (#12100) 
Signed-off-by: maipbui <maibui@microsoft.com>
Dependency: [https://github.com/sonic-net/sonic-buildimage/pull/12065](https://github.com/sonic-net/sonic-buildimage/pull/12065)
#### Why I did it
`subprocess.Popen()` and `subprocess.run()` is used with `shell=True`, which is very dangerous for shell injection.
`os` - not secure against maliciously constructed input and dangerous if used to evaluate dynamic content
`getstatusoutput` is dangerous because it contains `shell=True` in the implementation
#### How I did it
Replace `os` by `subprocess`, use with `shell=False`
Remove unused functions
2022-12-01 12:12:50 -05:00
..
accton [device/accton] Replace os.system and remove subprocess with shell=True (#11985) 2022-11-07 10:31:32 -05:00
alphanetworks [Alphanetworks] Add new platform BES2348T (#11196) 2022-09-15 21:34:52 -07:00
arista [Arista] Enable ipv6 128b lpm on 720DT-48S (#12832) 2022-11-29 11:20:50 +08:00
barefoot Revert "[Barefoot] Add xon_offset to pg_profile_lookup.ini (#12073)" (#12568) 2022-11-02 09:10:07 +08:00
broadcom Disable ALPM distributed hitbit thread that is used for debug purpose only but interfered with Other functional operations (#9199) 2021-11-09 07:21:57 -08:00
celestica Enable Dx010 LPM (#12642) 2022-11-09 08:15:41 -08:00
centec [device/centec] Replace os.system and remove subprocess with shell=True (#12024) 2022-10-07 10:48:25 -04:00
cig Add platform_asic file to each platform folder in sonic-device-data based package (#8542) 2021-10-08 19:27:48 -07:00
common Update ECN settings for storage backend (#12855) 2022-11-29 10:19:06 -08:00
dell [DPB] Dell Z9332f port breakout changes (#12789) 2022-11-28 22:16:51 -08:00
delta [device/delta] Mitigation for command injection vulnerability (#11865) 2022-10-13 21:11:51 -07:00
facebook/x86_64-facebook_wedge100-r0 Add platform_asic file to each platform folder in sonic-device-data based package (#8542) 2021-10-08 19:27:48 -07:00
ingrasys [BFN] Update configuration files (#9913) 2022-03-09 09:57:08 +05:30
inventec [BRCMSAI 6.0.0.13-1] Fix Cancun file directory at new location causing TD3 platform boot issue (#9922) 2022-02-07 08:56:06 -08:00
juniper [device/juniper] Mitigation for security vulnerability (#11838) 2022-11-22 10:46:12 -05:00
marvell [device/marvell] Mitigation for security vulnerability (#11876) 2022-11-30 00:06:28 -08:00
mellanox [Mellanox] Add device files for SN5600 (#12831) 2022-11-30 19:47:50 +02:00
mitac/x86_64-mitac_ly1200_b32h0_c3-r0 Add platform_asic file to each platform folder in sonic-device-data based package (#8542) 2021-10-08 19:27:48 -07:00
netberg [Netberg][Barefoot] Added support for Aurora 610 (#10579) 2022-06-30 10:40:47 -07:00
nokia [nokia] Replace os.system and remove subprocess with shell=True (#12100) 2022-12-01 12:12:50 -05:00
pegatron/x86_64-pegatron_porsche-r0 Add platform_asic file to each platform folder in sonic-device-data based package (#8542) 2021-10-08 19:27:48 -07:00
quanta [device/quanta] Mitigation for security vulnerability (#11867) 2022-10-19 10:05:36 -04:00
ragile [device/ragile] Mitigation for security vulnerability (#11744) 2022-11-29 11:54:37 -05:00
ruijie/x86_64-ruijie_b6510-48vs8cq-r0 [device/ruijie] Mitigation for security vulnerability #11779 2022-08-23 09:48:42 -04:00
virtual Add gearbox taps to vs gearbox_config.json (#11480) 2022-10-10 13:35:06 -07:00
wistron [Wistron] Add 6512-32r platform support (#10956) 2022-06-30 09:13:56 -07:00
wnc/x86_64-wnc_osw1800-r0 [BFN] Update configuration files (#9913) 2022-03-09 09:57:08 +05:30