matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
dc2cc9d507
sonic-buildimage/platform/mellanox
History
Mai Bui 648ca075c7
[device/mellanox] Mitigation for security vulnerability (#11877) 
Signed-off-by: maipbui <maibui@microsoft.com>
Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first.
#### Why I did it
`subprocess.Popen()` and `subprocess.check_output()` is used with `shell=True`, which is very dangerous for shell injection.
#### How I did it
Disable `shell=True`, enable `shell=False`
#### How to verify it
Tested on DUT, compare and verify the output between the original behavior and the new changes' behavior.
[testresults.zip](https://github.com/sonic-net/sonic-buildimage/files/9550867/testresults.zip)
2022-10-06 17:51:31 -04:00
..
docker-saiserver-mlnx [SAIServer] support saiserver v2 in bullseye (#11849) 2022-08-25 22:51:53 -07:00
docker-syncd-mlnx [asan] add print_suppressions=0 to ASAN configs (#11252) 2022-06-28 18:45:52 +03:00
docker-syncd-mlnx-rpc Upgrade mellanox platform containers (syncd / saiserver / syncd-rpc) and pmon to bullseye (#10580) 2022-05-10 12:45:28 +03:00
hw-management [Mellanox] Update hw-mgmt package to V.7.0020.3006 (#11538) 2022-08-11 08:59:26 +03:00
issu-version Upgrade mellanox platform containers (syncd / saiserver / syncd-rpc) and pmon to bullseye (#10580) 2022-05-10 12:45:28 +03:00
mft [Mellanox] Add arm64 architecture support to mellanox platform (#11342) 2022-07-13 16:21:33 +03:00
mlnx-platform-api [device/mellanox] Mitigation for security vulnerability (#11877) 2022-10-06 17:51:31 -04:00
mlnx-sai [Mellanox] Update SAI to v2205.22.1.19 and SDK/FW to v4.5.3168/v2010.3170 (#12205) 2022-09-30 09:40:12 +03:00
sdk-src [Mellanox] Update SAI to v2205.22.1.19 and SDK/FW to v4.5.3168/v2010.3170 (#12205) 2022-09-30 09:40:12 +03:00
.gitignore [mellanox] build SDK driver from open source (#3580) 2019-10-08 07:57:12 -07:00
asic_table.j2 [Mellanox] Update NVIDIA License header for files changed since 1.1.2022 (#10289) 2022-03-23 13:19:25 +02:00
docker-saiserver-mlnx.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
docker-saiserver-mlnx.mk Upgrade mellanox platform containers (syncd / saiserver / syncd-rpc) and pmon to bullseye (#10580) 2022-05-10 12:45:28 +03:00
docker-syncd-mlnx-rpc.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
docker-syncd-mlnx-rpc.mk Upgrade mellanox platform containers (syncd / saiserver / syncd-rpc) and pmon to bullseye (#10580) 2022-05-10 12:45:28 +03:00
docker-syncd-mlnx.dep [build][asan] make dpkg cache asan-aware (#10750) 2022-05-31 11:15:44 +03:00
docker-syncd-mlnx.mk [asan] add debug package for asan-enabled containers (#10953) 2022-05-31 09:24:18 +03:00
fw.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
fw.mk [Mellanox] Update SAI to v2205.22.1.19 and SDK/FW to v4.5.3168/v2010.3170 (#12205) 2022-09-30 09:40:12 +03:00
hw-management.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
hw-management.mk [Mellanox] Update hw-mgmt package to V.7.0020.3006 (#11538) 2022-08-11 08:59:26 +03:00
install-pending-fw.dep [Mellanox] Modified Platform API to support all firmware updates in single boot (#9608) 2022-01-24 00:56:38 -08:00
install-pending-fw.mk [Mellanox] Update NVIDIA License header for files changed since 1.1.2022 (#10289) 2022-03-23 13:19:25 +02:00
install-pending-fw.py [Mellanox] Update NVIDIA License header for files changed since 1.1.2022 (#10289) 2022-03-23 13:19:25 +02:00
issu-version.dep Fix cache related mellanox bullseye build failures (#9234) 2021-11-16 14:49:47 -08:00
issu-version.mk Upgrade mellanox platform containers (syncd / saiserver / syncd-rpc) and pmon to bullseye (#10580) 2022-05-10 12:45:28 +03:00
libsaithrift-dev.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
libsaithrift-dev.mk [Mellanox] Add arm64 architecture support to mellanox platform (#11342) 2022-07-13 16:21:33 +03:00
mft.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
mft.mk [Mellanox] Update MFT to v4.21.0-100 (#11758) 2022-09-30 09:48:40 +03:00
mlnx-ffb.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
mlnx-ffb.mk [Mellanox] Add NVIDIA Copyright header to "mellanox" files (#8799) 2021-10-17 19:03:02 +03:00
mlnx-ffb.sh [Mellanox] Add NVIDIA Copyright header to "mellanox" files (#8799) 2021-10-17 19:03:02 +03:00
mlnx-fw-upgrade.j2 [Mellanox] Add hw-mgmt patch for SimX platform adaptation (#6782) 2021-02-25 12:41:29 +02:00
mlnx-onie-fw-update.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
mlnx-onie-fw-update.mk [Mellanox] Add NVIDIA Copyright header to "mellanox" files (#8799) 2021-10-17 19:03:02 +03:00
mlnx-onie-fw-update.sh [Mellanox] Update NVIDIA License header for files changed since 1.1.2022 (#10289) 2022-03-23 13:19:25 +02:00
mlnx-platform-api.dep [Bug][Build]: Fix the mlnx-platform-api dpkg cache config error (#9705) 2022-01-09 09:21:59 +08:00
mlnx-platform-api.mk [sonic-platform-common][sonic-platform-daemons] submodule update; Remove python2 sonic-platform-common wheel (#10994) 2022-06-04 07:41:15 -07:00
mlnx-sai.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
mlnx-sai.mk [Mellanox] Update SAI to v2205.22.1.19 and SDK/FW to v4.5.3168/v2010.3170 (#12205) 2022-09-30 09:40:12 +03:00
mlnx-ssd-fw-update.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
mlnx-ssd-fw-update.mk [Mellanox] Add NVIDIA Copyright header to "mellanox" files (#8799) 2021-10-17 19:03:02 +03:00
mlnx-ssd-fw-update.sh [Mellanox] Enhance Platform API to support SN2201 - RJ45 ports and new components mgmt. (#10377) 2022-06-20 19:12:20 -07:00
one-image.dep [mellanox]: Add DPKG local caching support. (#4441) 2020-04-20 19:02:46 -07:00
one-image.mk [Mellanox] Add NVIDIA Copyright header to "mellanox" files (#8799) 2021-10-17 19:03:02 +03:00
peripheral_table.j2 [Mellanox] Add NVIDIA Copyright header to "mellanox" files (#8799) 2021-10-17 19:03:02 +03:00
platform.conf one image implementation (#215) 2017-01-29 11:33:33 -08:00
rules.dep [Mellanox] Modified Platform API to support all firmware updates in single boot (#9608) 2022-01-24 00:56:38 -08:00
rules.mk [Mellanox] Add arm64 architecture support to mellanox platform (#11342) 2022-07-13 16:21:33 +03:00
sdk.dep [nvidia/mellanox] add MLNX_SDK_DEB_VERSION to SDK packages flags list. (#7747) 2021-06-08 09:38:00 -07:00
sdk.mk [Mellanox] Update SAI to v2205.22.1.19 and SDK/FW to v4.5.3168/v2010.3170 (#12205) 2022-09-30 09:40:12 +03:00
zero_profiles.j2 [Mellanox] Add NVIDIA copyright header for NVIDIA added files (#12130) 2022-10-02 11:34:24 +03:00