gentoo/dev-python/pyyaml/files/pyyaml-5.1-cve-2017-18342.patch
Virgil Dupras 79ba924d94
dev-python/pyyaml: bump to 5.1
Bug: https://bugs.gentoo.org/659348
Signed-off-by: Virgil Dupras <vdupras@gentoo.org>
Package-Manager: Portage-2.3.62, Repoman-2.3.11
2019-04-07 19:31:14 -04:00

41 lines
1.4 KiB
Diff

diff --git a/lib/yaml/__init__.py b/lib/yaml/__init__.py
index e7a419d..5f80761 100644
--- a/lib/yaml/__init__.py
+++ b/lib/yaml/__init__.py
@@ -106,6 +106,7 @@ def load(stream, Loader=None):
and produce the corresponding Python object.
"""
if Loader is None:
+ raise RuntimeError("Unsafe load() call disabled by Gentoo. See bug #659348")
load_warning('load')
Loader = FullLoader
@@ -121,6 +122,7 @@ def load_all(stream, Loader=None):
and produce corresponding Python objects.
"""
if Loader is None:
+ raise RuntimeError("Unsafe load() call disabled by Gentoo. See bug #659348")
load_warning('load_all')
Loader = FullLoader
diff --git a/lib3/yaml/__init__.py b/lib3/yaml/__init__.py
index 5df0bb5..6952ba5 100644
--- a/lib3/yaml/__init__.py
+++ b/lib3/yaml/__init__.py
@@ -106,6 +106,7 @@ def load(stream, Loader=None):
and produce the corresponding Python object.
"""
if Loader is None:
+ raise RuntimeError("Unsafe load() call disabled by Gentoo. See bug #659348")
load_warning('load')
Loader = FullLoader
@@ -121,6 +122,7 @@ def load_all(stream, Loader=None):
and produce corresponding Python objects.
"""
if Loader is None:
+ raise RuntimeError("Unsafe load() call disabled by Gentoo. See bug #659348")
load_warning('load_all')
Loader = FullLoader