Byobu-select-session should not use Python's "eval" when reading input from user

Bug #919391 reported by Ryan Thompson on 2012-01-20
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
byobu
Medium
Unassigned

Bug Description

I noticed that byobu-select-session use Python's "input" function, which uses "eval". I don't think that the user input code in byobu-select-session is intended to read arbitrary python code, so I modified it to only read integers.

Patch attached.

Ryan Thompson (rct86) wrote :
Dustin Kirkland  (kirkland) wrote :

Awesome! Thanks!

Changed in byobu:
importance: Undecided → Medium
status: New → Fix Committed
Changed in byobu:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers