components/python/pygments/patches/CVE-2015-8557.patch
author Danek Duvall <danek.duvall@oracle.com>
Tue, 19 Jan 2016 14:00:51 -0800
changeset 5295 5c98bff030f2
child 5301 668f8ba776f1
permissions -rw-r--r--
22364960 problem in PYTHON-MOD/PYGMENTS

This patch is pulled from upstream; once we pull in 2.1 or newer, it will
no longer be necessary.

--- Pygments-1.6/pygments/formatters/img.py	Tue Jan 12 15:06:52 2016
+++ Pygments-1.6/pygments/formatters/img.py	Tue Jan 12 15:08:24 2016
@@ -9,6 +9,7 @@
     :license: BSD, see LICENSE for details.
 """
 
+import shlex
 import sys
 
 from pygments.formatter import Formatter
@@ -73,8 +74,8 @@
 
     def _get_nix_font_path(self, name, style):
         from commands import getstatusoutput
-        exit, out = getstatusoutput('fc-list "%s:style=%s" file' %
-                                    (name, style))
+        exit, out = getstatusoutput('fc-list %s file' %
+                                    shlex.quote("%s:style=%s" % (name, style)))
         if not exit:
             lines = out.splitlines()
             if lines: