joystick

#3 [secaudit,blocking] subprocess is called with flattening of command
Closed by puiterwijk. Opened by puiterwijk.

Closed
Reopen Issue

In joystick/consumers/fedora_messaging_consumer.py, line 21, subprocess.Popen is being called called with ' '.join(command), instead of passing the list.
Please pass in the raw list so there's no chance a particular argv gets mis-interpreted because of spaces in a value.

Already fixed in https://pagure.io/joystick/c/0ac81d6088c6179ccde7f7462e0724e79494389f?branch=master

Metadata Update from @puiterwijk:
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.