_subprocess: perform invalid UTF-8 substitution (#572)

* _subprocess: perform invalid UTF-8 substitution Signed-off-by: William Woodruff <william@trailofbits.com> * CHANGELOG: record changes Signed-off-by: William Woodruff <william@trailofbits.com> --------- Signed-off-by: William Woodruff <william@trailofbits.com>
pypa · Mar 23, 2023 · 3e13200 · 3e13200
1 parent f12066a
commit 3e13200
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -14,6 +14,11 @@ All versions prior to 0.0.9 are untracked.
   behaviour when using hashed requirements or the `--no-deps` flag
   ([#540](https://github.com/pypa/pip-audit/pull/540))
 
+### Fixed
+
+* Fixed a crash caused by invalid UTF-8 sequences in subprocess outputs
+  ([#572](https://github.com/pypa/pip-audit/pull/572))
+
 ## [2.5.2]
 
 ### Fixed

diff --git a/pip_audit/_subprocess.py b/pip_audit/_subprocess.py
@@ -65,4 +65,4 @@ def run(args: Sequence[str], *, log_stdout: bool = False, state: AuditState = Au
             stderr=stderr.decode(errors="replace"),
         )
 
-    return stdout.decode("utf-8")
+    return stdout.decode("utf-8", errors="replace")