Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Vegard Nossum f7f4ff54c4 docs: kernel_feat.py: fix potential command injection ... commit c48a7c44a1 upstream. The kernel-feat directive passes its argument straight to the shell. This is unfortunate and unnecessary. Let's always use paths relative to $srctree/Documentation/ and use subprocess.check_call() instead of subprocess.Popen(shell=True). This also makes the code shorter. This is analogous to commit 3231dd5862 ("docs: kernel_abi.py: fix command injection") where we did exactly the same thing for kernel_abi.py, somehow I completely missed this one. Link: https://fosstodon.org/@jani/111676532203641247 Reported-by: Jani Nikula <jani.nikula@intel.com> Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com> Cc: stable@vger.kernel.org Signed-off-by: Jonathan Corbet <corbet@lwn.net> Link: https://lore.kernel.org/r/20240110174758.3680506-1-vegard.nossum@oracle.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		History 2024-01-20 11:53:02 +01:00
..
it_IT	docs: move riscv under arch	2023-10-10 13:37:43 -06:00
ja_JP	A handful of late-arriving documentation fixes, plus one Spanish	2023-05-05 13:16:42 -07:00
ko_KR	Documentation/security-bugs: move from admin-guide/ to process/	2023-03-12 15:56:43 +01:00
sp_SP	docs/sp_SP: Add translation of process/embargoed-hardware-issues	2023-09-23 01:04:13 -06:00
zh_CN	docs: kernel_feat.py: fix potential command injection	2024-01-20 11:53:02 +01:00
zh_TW	docs: kernel_feat.py: fix potential command injection	2024-01-20 11:53:02 +01:00
index.rst	Documentation: Start translations to Spanish	2022-11-01 16:58:29 -06:00