jjb: system-tests: use `yaml.unsafe_load()` method
authorFrancis Deslauriers <francis.deslauriers@efficios.com>
Fri, 20 Dec 2019 04:35:39 +0000 (23:35 -0500)
committerJonathan Rajotte Julien <jonathan.rajotte-julien@efficios.com>
Fri, 20 Dec 2019 19:16:16 +0000 (14:16 -0500)
commitbe7f51b658568ac8d4d83aaf55b6ee381a75e04f
tree1287b7773e9363f6f000eed16ecddc9cb056fb0f
parent482bbbfb82c72284765397b7e5560bea4c240556
jjb: system-tests: use `yaml.unsafe_load()` method

Since PyYAML version 5.2 `load()` errors out when parsing such field:
  !!python/object/apply:collections.OrderedDict [...]

This is done to prevent vulnerabilities exploitable using the
`object/apply` construct. See this Github issue [1]:

I believe the real bug is that Lava produce a yaml file with such a
construct. I believe it's not on purpose because we can see a commit [2]
preventing the use of `object/apply` for another type.

For now, use `unsafe_load()` until lava does not produce `object/apply`
contructs.

[1] https://github.com/yaml/pyyaml/issues/364
[2] https://github.com/Linaro/lava/commit/14b347c51efb89e8d6c64d9aa74fb4190f03227c

Signed-off-by: Francis Deslauriers <francis.deslauriers@efficios.com>
scripts/system-tests/lava2-submit.py
This page took 0.024156 seconds and 4 git commands to generate.