wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-07 13:00:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

parallel-make-check: percent-encode warn() workflow-command data

Browse Source 
A config name comes from JSON and is only checked for emptiness and a
'/', so it can carry %, CR or LF. Passed straight into the ::warning::
workflow command those would truncate the annotation or be parsed as a
second command, so escape them in the GitHub branch of warn() per
GitHub's documented command-data encoding (% first). Local output is
unchanged.
This commit is contained in:
Juliusz Sosinowicz
2026-06-15 11:14:06 +00:00
parent 7b2d19ca86
commit d9079978ed
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/scripts/parallel-make-check.py
+8 -1
View File
@@ -247,7 +247,14 @@ def dump(title: str, path: Path) -> None:
def warn(msg: str) -> None:
# GitHub surfaces ::warning:: as an annotation at the top of the run;
# locally it is just a line. Informational only - never fails the run.
print(f"::warning::{msg}" if ON_GITHUB else f"WARNING: {msg}")
if ON_GITHUB:
# Percent-encode the command data (GitHub's documented escaping) so
# a stray %, CR or LF - e.g. from a config name out of the JSON -
# can't truncate the annotation or be read as a second command.
msg = msg.replace("%", "%25").replace("\r", "%0D").replace("\n", "%0A")
print(f"::warning::{msg}")
else:
print(f"WARNING: {msg}")
def stale_estimate(cfg: Config, minutes: float) -> bool: