Public bug reported:

Whilst there is no issue with the following use of subprocess.Popen with
shell=True today there is no reason to use it with shell=True in this
instance.


In softwareproperties/MirrorTest.py on line 29 (through to line 34) under the 
PingWorker the following code is found:

                   host = mirror.hostname

                    self.parent.report_action("Pinging %s..." % host)
                    commando = subprocess.Popen("ping -q -c 2 -W 1 -i 0.5 %s" % 
host,
                                                shell=True, 
stdout=subprocess.PIPE,
                                                stderr=subprocess.STDOUT).stdout


The code should be changed to something like the following:

                    commando = subprocess.Popen(["ping", "-q", "-c 2", "-W 1",  
"-i 0.5", host]
                                                , stdout=subprocess.PIPE,
                                                stderr=subprocess.STDOUT).stdout

** Affects: software-properties (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1060192

Title:
  needless shell=True in a subprocess.Popen call

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/1060192/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to