Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 682922 - =app-misc/lirc-0.10.1 with dev-python/pyyaml-5.1 - RuntimeError: Unsafe load() call disabled by Gentoo. See bug #659348
Summary: =app-misc/lirc-0.10.1 with dev-python/pyyaml-5.1 - RuntimeError: Unsafe load(...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: AMD64 Linux
: Normal normal (vote)
Assignee: Craig Andrews
URL: https://sourceforge.net/p/lirc/git/me...
Whiteboard:
Keywords:
: 683416 685740 (view as bug list)
Depends on:
Blocks: unsafe-pyyaml
  Show dependency tree
 
Reported: 2019-04-09 09:36 UTC by Steffen Hau
Modified: 2019-05-12 20:00 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
app-misc/lirc-0.10.1-build.log (app-misc_lirc-0.10.1_build.log,103.25 KB, text/plain)
2019-04-09 09:36 UTC, Steffen Hau 		Details
simple patch (replace function "load" to "safe_load") (fix_call_load_func.patch,1.57 KB, patch)
2019-05-08 15:18 UTC, Atlant 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Steffen Hau 2019-04-09 09:36:33 UTC 
Created attachment 572298 [details]
app-misc/lirc-0.10.1-build.log

See attached build.log. Error is caused by bug 659348.
Comment 1 Atlant 2019-05-08 15:18:06 UTC 
Created attachment 575534 [details, diff]
simple patch (replace function "load" to "safe_load")
Comment 2 Craig Andrews gentoo-dev 2019-05-11 16:08:34 UTC 
(In reply to Atlant from comment #1)
> Created attachment 575534 [details, diff] [details, diff]
> simple patch (replace function "load" to "safe_load")

Submitted to upstream at https://sourceforge.net/p/lirc/git/merge-requests/39/
Comment 3 Craig Andrews gentoo-dev 2019-05-11 16:09:32 UTC 
*** Bug 683416 has been marked as a duplicate of this bug. ***
Comment 4 Larry the Git Cow gentoo-dev 2019-05-11 16:16:58 UTC 
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d2ca8849b2d366ed99ab655c4d69731b7500e594

commit d2ca8849b2d366ed99ab655c4d69731b7500e594
Author:     Craig Andrews <candrews@gentoo.org>
AuthorDate: 2019-05-11 16:14:57 +0000
Commit:     Craig Andrews <candrews@gentoo.org>
CommitDate: 2019-05-11 16:16:51 +0000

    app-misc/lirc: require <dev-python/pyyaml-5
    
    Closes: https://bugs.gentoo.org/682922
    Package-Manager: Portage-2.3.66, Repoman-2.3.12
    Signed-off-by: Craig Andrews <candrews@gentoo.org>

 app-misc/lirc/lirc-0.10.1.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Additionally, it has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=004c4079cde46b2a793a4bb7b02d1d939e59aff4

commit 004c4079cde46b2a793a4bb7b02d1d939e59aff4
Author:     Craig Andrews <candrews@gentoo.org>
AuthorDate: 2019-05-11 16:11:28 +0000
Commit:     Craig Andrews <candrews@gentoo.org>
CommitDate: 2019-05-11 16:16:51 +0000

    app-misc/lirc: Use pyyaml safe_load instead of load
    
    See upstream report at
    https://sourceforge.net/p/lirc/git/merge-requests/39/
    
    Bug: https://bugs.gentoo.org/682922
    Package-Manager: Portage-2.3.66, Repoman-2.3.12
    Signed-off-by: Craig Andrews <candrews@gentoo.org>

 app-misc/lirc/files/lirc-0.10.1-unsafe-load.patch |  52 +++++++
 app-misc/lirc/lirc-0.10.1-r1.ebuild               | 160 ++++++++++++++++++++++
 2 files changed, 212 insertions(+)
Comment 5 Craig Andrews gentoo-dev 2019-05-12 20:00:00 UTC 
*** Bug 685740 has been marked as a duplicate of this bug. ***