[bitbake-devel] [PATCH 2/2] fetch: don't use shell=True when listing ar files
Ross Burton
ross.burton at intel.com
Fri Nov 23 15:01:22 UTC 2018
Signed-off-by: Ross Burton <ross.burton at intel.com>
---
bitbake/lib/bb/fetch2/__init__.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/bitbake/lib/bb/fetch2/__init__.py b/bitbake/lib/bb/fetch2/__init__.py
index 572b71a9655..8d05f0c3d82 100644
--- a/bitbake/lib/bb/fetch2/__init__.py
+++ b/bitbake/lib/bb/fetch2/__init__.py
@@ -1469,7 +1469,7 @@ class FetchMethod(object):
else:
cmd = 'rpm2cpio.sh %s | cpio -id' % (file)
elif file.endswith('.deb') or file.endswith('.ipk'):
- output = subprocess.check_output('ar -t %s' % file, preexec_fn=subprocess_setup, shell=True)
+ output = subprocess.check_output(['ar', '-t', file], preexec_fn=subprocess_setup)
datafile = None
if output:
for line in output.decode().splitlines():
--
2.11.0
More information about the bitbake-devel
mailing list