Skip to content

[device/juniper] Mitigation for security vulnerability #11838

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 19 commits into from
Nov 22, 2022
Merged

[device/juniper] Mitigation for security vulnerability #11838

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
04d7d16
Replace subprocess getstatusoutput by run
maipbui Aug 24, 2022
fba2445
Fix var name
maipbui Aug 24, 2022
e783a42
Add capture_output and minimize code change
maipbui Aug 24, 2022
25af1be
Remove unused variable
maipbui Aug 24, 2022
954c0da
Add more args
maipbui Aug 29, 2022
83d60d5
Remove center directory
maipbui Aug 31, 2022
f380aae
Remove os.system
maipbui Aug 31, 2022
2fa4ded
Remove shutil and use subprocess and with
maipbui Sep 1, 2022
109303e
Use with
maipbui Sep 1, 2022
d40d086
Simplify code
maipbui Sep 1, 2022
b44a588
Fix lgtm
maipbui Sep 1, 2022
a000b35
Output text processing
maipbui Sep 7, 2022
9acf59c
Replace unsafe funcs in platform
maipbui Sep 19, 2022
e667990
Fix lgtm
maipbui Sep 19, 2022
37496d4
Fix PR comments
maipbui Oct 5, 2022
b53376c
Merge remote-tracking branch 'upstream/master' into juniper_security
maipbui Oct 5, 2022
59ce323
Fix lgtm
maipbui Oct 17, 2022
fb8b24f
Fix code to be consistent with original behavior
maipbui Nov 18, 2022
2b45169
fix lgtm
maipbui Nov 21, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 9 additions & 11 deletions device/juniper/x86_64-juniper_qfx5200-r0/plugins/qfx5200_eeprom_data.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,7 @@
# as noted in the Third-Party source code file.

import os
import shutil
import binascii
import subprocess
from sonic_eeprom import eeprom_tlvinfo
Expand Down Expand Up @@ -170,20 +171,17 @@ def main():
eeprom_file.write("Main board eeprom (0x57)\r\n")
eeprom_file.write("===============================\r\n")

MainEepromCreate = 'sudo echo 24c02 0x57 > /sys/bus/i2c/devices/i2c-0/new_device'
MainEepromCreate = '24c02 0x57'
out_file = '/sys/bus/i2c/devices/i2c-0/new_device'
# Write the contents of Main Board EEPROM to file
try:
os.system(MainEepromCreate)
except OSError:
print('Error: Execution of "%s" failed', MainEepromCreate)
return False
f = open(out_file, 'w')
f.write(MainEepromCreate)
f.close()

MainEepromFileCmd = 'cat /sys/bus/i2c/devices/i2c-0/0-0057/eeprom > /etc/init.d/MainEeprom_qfx5200_ascii'
try:
os.system(MainEepromFileCmd)
except OSError:
print('Error: Execution of "%s" failed', MainEepromFileCmd)
return False
src_file = '/sys/bus/i2c/devices/i2c-0/0-0057/eeprom'
dst_file = '/etc/init.d/MainEeprom_qfx5200_ascii'
shutil.copy(src_file, dst_file)

maineeprom_ascii = '/etc/init.d/MainEeprom_qfx5200_ascii'

Expand Down
8 changes: 3 additions & 5 deletions device/juniper/x86_64-juniper_qfx5210-r0/plugins/qfx5210_eeprom_data.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,12 +82,10 @@ def main():
eeprom_file.write("Manufacture Name=%s\r\n" % eeprom_qfx5210.manufacture_name_str())

CPUeepromFileCmd = 'cat /sys/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0056/eeprom > /etc/init.d/eeprom_qfx5210_ascii'
src_file = '/sys/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0056/eeprom'
dst_file = '/etc/init.d/eeprom_qfx5210_ascii'
# Write the contents of CPU EEPROM to file
try:
os.system(CPUeepromFileCmd)
except OSError:
print('Error: Execution of "%s" failed', CPUeepromFileCmd)
return False
shutil.copy(src_file, dst_file)

eeprom_ascii = '/etc/init.d/eeprom_qfx5210_ascii'
# Read file contents in Hex format
Expand Down