Sign upLogin

avocado-framework/avocado

View on GitHub
Star

Showing 885 of 902 total issues

Starting a process with a shell: Seems safe, but may be changed in the future, consider rewriting without shell
Open

    return os.system("perl -e 'use TAP::Parser;'") != 0
Severity: Info
Found in selftests/functional/output.py by bandit

Try, Except, Pass detected.
Open

            except Exception:  # pylint: disable=W0703
Severity: Info
Found in avocado/plugins/teststmpdir.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    out = process.system_output(cmd, shell=True, ignore_status=True).decode("utf-8")
Severity: Minor
Found in avocado/utils/disk.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    output = process.run(cmd, ignore_status=True, shell=True).stdout_text
Severity: Minor
Found in avocado/utils/pci.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

        if process.system(
            f"{self.ndctl} destroy-namespace {args}", shell=True, ignore_status=True
Severity: Minor
Found in avocado/utils/pmem.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

            process.system(up_cmd, shell=True, sudo=True)
Severity: Minor
Found in avocado/utils/software_manager/backends/apt.py by bandit

Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
Open

            data = urlopen(url).read()
Severity: Minor
Found in avocado/utils/vmimage.py by bandit

Consider possible security implications associated with subprocess module.
Open

import subprocess
Severity: Info
Found in optional_plugins/golang/avocado_golang/runner.py by bandit

Probable insecure usage of temp file/directory.
Open

        output_lxc_path = "/tmp/.avocado_task_output_dir"
Severity: Minor
Found in optional_plugins/spawner_remote/avocado_spawner_remote/__init__.py by bandit

Standard pseudo-random generators are not suitable for security/cryptographic purposes.
Open

                column_index = random.randint(0, len(row) - 1)
Severity: Info
Found in optional_plugins/varianter_cit/avocado_varianter_cit/Cit.py by bandit

Try, Except, Pass detected.
Open

        except Exception:
Severity: Info
Found in selftests/unit/utils/cloudinit.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

        p = process.SubProcess(cmd="ls -l", sudo=True, shell=True)
Severity: Minor
Found in selftests/unit/utils/process.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

        p = process.run(cmd="ls -l", sudo=True, shell=True, ignore_status=True)
Severity: Minor
Found in selftests/unit/utils/process.py by bandit

Consider possible security implications associated with subprocess module.
Open

import subprocess
Severity: Info
Found in avocado/plugins/diff.py by bandit

subprocess call - check for execution of untrusted input.
Open

            self.process = subprocess.Popen(
                args,
                stdin=subprocess.PIPE,
                stdout=subprocess.PIPE,
                stderr=subprocess.PIPE,
Severity: Info
Found in avocado/utils/gdb.py by bandit

Try, Except, Pass detected.
Open

    except Exception:  # pylint: disable=W0703
Severity: Info
Found in avocado/utils/genio.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    if process.system(cmd, ignore_status=True, sudo=True, shell=True):
Severity: Minor
Found in avocado/utils/multipath.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    output = process.run(cmd, shell=True, sudo=True, ignore_status=True).stdout_text
Severity: Minor
Found in avocado/utils/nvme.py by bandit

Function call with shell=True parameter identified, possible security issue.
Open

    output = process.run(cmd, ignore_status=True, shell=True).stdout_text
Severity: Minor
Found in avocado/utils/pci.py by bandit

Consider possible security implications associated with pickle module.
Open

import pickle
Severity: Info
Found in avocado/utils/stacktrace.py by bandit
Severity
Category
Status
Source
Language