bandit/examples/subprocess_shell.py
Stanisław Pitucha 47ddb67cb5 Test for bug 1513091
Add a test for case with constructed subprocess call.

Change-Id: If62c04afdb0f19bab3d9ba87ce0c40a0a3e24739
2015-11-05 16:47:51 +11:00

32 lines
888 B
Python

import subprocess
from subprocess import Popen as pop
def Popen(*args, **kwargs):
print('hi')
pop('/bin/gcc --version', shell=True)
Popen('/bin/gcc --version', shell=True)
subprocess.Popen('/bin/gcc --version', shell=True)
subprocess.Popen(['/bin/gcc', '--version'], shell=False)
subprocess.Popen(['/bin/gcc', '--version'])
subprocess.call(["/bin/ls",
"-l"
])
subprocess.call('/bin/ls -l', shell=True)
subprocess.check_call(['/bin/ls', '-l'], shell=False)
subprocess.check_call('/bin/ls -l', shell=True)
subprocess.check_output(['/bin/ls', '-l'])
subprocess.check_output('/bin/ls -l', shell=True)
subprocess.Popen('/bin/ls *', shell=True)
subprocess.Popen('/bin/ls %s' % ('something',), shell=True)
subprocess.Popen('/bin/ls {}'.format('something'), shell=True)
command = "/bin/ls" + unknown_function()
subprocess.Popen(command, shell=True)