mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-18 12:39:28 +00:00
19 lines
702 B
Python
19 lines
702 B
Python
|
# Provenance: Contrast-Security-OSS/vulnpy do_subprocess_popen (vuln).
|
||
|
|
# repo: Contrast-Security-OSS/vulnpy
|
||
|
|
# commit: d1d0f64c06f038fe59a049e0e6001bfaf9839697
|
||
|
|
# parent: d1d0f64c06f038fe59a049e0e6001bfaf9839697
|
||
|
|
# commit_url: https://github.com/Contrast-Security-OSS/vulnpy/blob/d1d0f64c06f038fe59a049e0e6001bfaf9839697/src/vulnpy/trigger/cmdi.py#L10
|
||
|
|
# cve:
|
||
|
|
# license: MIT
|
||
|
|
# function: do_subprocess_popen
|
||
|
|
# relpath: src/vulnpy/trigger/cmdi.py
|
||
|
|
# provenance: human
|
||
|
|
# mechanism: source_reaches_sink
|
||
|
|
|
||
|
|
def do_subprocess_popen(command):
|
||
|
|
process = subprocess.Popen(
|
||
|
|
command, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, shell=True
|
||
|
|
)
|
||
|
|
stdout, _ = process.communicate()
|
||
|
|
return stdout
|