utils-code/pyenv.pyenv
1
0
Fork 0
mirror of https://github.com/pyenv/pyenv.git synced 2026-09-10 07:36:16 -04:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

pyenv-binary: reject invalid version names and drop readlink -f in save

Browse source 
A version is a single directory name under versions/, so refuse names with a
slash or a dot-dot component before building the prefix path.

Also emit the python paths directly instead of `readlink -f`, which BSD
readlink on macOS does not support; ldd/otool follow the symlinks anyway, so
the resolved paths were never needed.
This commit is contained in:
macayu17 2026-07-01 10:21:44 +05:30
parent bcd73586b4
commit f0ac849b16
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
plugins/pyenv-binary/libexec/pyenv-binary-save
View file

@ -27,6 +27,15 @@ if [ -z "$version" ]; then
exit 1
fi
# A version is a single directory name under versions/. Reject a name with a
# slash or a dot-dot component so it cannot point outside there.
case "$version" in
*/* | *..* )
echo "pyenv-binary: invalid version name \`${version}'" >&2
exit 1
;;
esac
prefix="${PYENV_ROOT}/versions/${version}"
if [ ! -d "${prefix}/bin" ]; then
echo "pyenv-binary: version \`${version}' is not installed" >&2
@ -58,7 +67,7 @@ system_deps() {
local f
{
for f in "${prefix}"/bin/python*; do
[ -e "$f" ] && readlink -f "$f"
[ -e "$f" ] && printf '%s\n' "$f"
done
find "${prefix}" -type f \( -name '*.so' -o -name '*.so.*' -o -name '*.dylib' \)
} | sort -u | while IFS= read -r f; do