Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bandit errors out when summing issues #27

Closed
ericwb opened this issue Apr 26, 2018 · 1 comment
Closed

Bandit errors out when summing issues #27

ericwb opened this issue Apr 26, 2018 · 1 comment

Comments

@ericwb
Copy link
Member

ericwb commented Apr 26, 2018

A bug was introduced in a refactor that causes bandit to fail summing results after processing.

Issue: subprocess call - check for execution of untrusted input.
Severity: Low Confidence: High
Location: /Users/travismcpeak/Documents/projects/OpenStack_projects/keystone/tools/install_venv_common.py:64
63
64 proc = subprocess.Popen(cmd, cwd=self.root, stdout=stdout)
65 output = proc.communicate()[0]

Traceback (most recent call last):
File "/usr/local/bin/bandit", line 10, in
sys.exit(main())
File "/usr/local/lib/python2.7/site-packages/bandit/bandit.py", line 243, in main
conf_filter=args.confidence - 1) > 0:
File "/usr/local/lib/python2.7/site-packages/bandit/core/manager.py", line 95, in results_count
return sum(i.filter(sev_filter, conf_filter) for i in self.results)
File "/usr/local/lib/python2.7/site-packages/bandit/core/manager.py", line 95, in
return sum(i.filter(sev_filter, conf_filter) for i in self.results)
File "/usr/local/lib/python2.7/site-packages/bandit/core/issue.py", line 50, in filter
return (rank.index(self.severity) >= rank.index(severity) and
ValueError: 0 is not in list

@ericwb
Copy link
Member Author

ericwb commented Apr 26, 2018

Bad import of bug from launchpad. Closing..

@ericwb ericwb closed this as completed Apr 26, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant