➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author vstinner
Recipients vstinner
Date 2014-10-14.22:35:36
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1413326137.66.0.946040587589.issue22637@psf.upfronthosting.co.za>
In-reply-to
Content 
Attached patch modifies the uuid module to not use a shell: it replaces os.popen() with subprocess.Popen on UNIX.

Running a shell is slower and is more vulnerable to code injection.

I only modified code path on UNIX right now. They is still a call to os.popen() on Windows.

Note: The patch works on bytes string instead of Unicode.
History
Date User Action Args
2014-10-14 22:35:37vstinnersetrecipients: + vstinner
2014-10-14 22:35:37vstinnersetmessageid: <1413326137.66.0.946040587589.issue22637@psf.upfronthosting.co.za>
2014-10-14 22:35:37vstinnerlinkissue22637 messages
2014-10-14 22:35:37vstinnercreate