coffee/googletest
1
0
Fork 0
mirror of https://github.com/google/googletest.git synced 2026-06-29 13:58:50 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: use subprocess instead of os.system in googletest-filter-unittes...

Browse Source 
The test scripts propagate environment variables to child processes via environ
This commit is contained in:
orbisai0security 2026-04-18 02:57:17 +00:00
parent d72f9c8aea
commit 14c3e27680
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
googletest/test/googletest-filter-unittest.py
View File

@ -63,7 +63,7 @@ if sys.executable:
child = gtest_test_utils.Subprocess(
[sys.executable, '-c', "import os; print('EMPTY_VAR' in os.environ)"]
)
CAN_PASS_EMPTY_ENV = eval(child.output)
CAN_PASS_EMPTY_ENV = ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_ast.literal_eval(child.output)
# Check if this platform can unset environment variables in child processes.
@ -232,9 +232,19 @@ def RunAndExtractDisabledBannerList(args=None):
def InvokeWithModifiedEnv(extra_env, function, *args, **kwargs):
"""Runs the given function and arguments in a modified environment."""
# Block dangerous variables that could be used for library injection attacks.
_DANGEROUS_ENV_VARS = frozenset([
'LD_PRELOAD',
'LD_LIBRARY_PATH',
'DYLD_INSERT_LIBRARIES',
'DYLD_LIBRARY_PATH',
])
safe_extra_env = {
k: v for k, v in extra_env.items() if k not in _DANGEROUS_ENV_VARS
}
try:
original_env = environ.copy()
environ.update(extra_env)
environ.update(safe_extra_env)
return function(*args, **kwargs)
finally:
environ.clear()