On 2/12/20 8:46 PM, Markus Klotzbuecher wrote:
Commit b237d358b "moveconfig: expand simple expressions" added support
for expanding expressions in configs, but used the unsafe python
built-in "eval". This patch fixes this by replacing eval with the
asteval module.

Signed-off-by: Markus Klotzbuecher <[email protected]>
Cc: Heinrich Schuchardt <[email protected]>
Cc: Heiko Schocher <[email protected]>
Cc: Tom Rini <[email protected]>
Cc: Simon Glass <[email protected]>
Cc: Joe Hershberger <[email protected]>
Cc: Masahiro Yamada <[email protected]>

Thanks for addressing this concern.

Reviewed-by: Heinrich Schuchardt <[email protected]>

Reply via email to