mirror of
https://github.com/pyenv/pyenv.git
synced 2024-09-20 01:15:37 -04:00
28 lines
834 B
Bash
Executable file
28 lines
834 B
Bash
Executable file
#!/usr/bin/env bash
|
|
# Usage: pyenv version-file-read <file>
|
|
set -e
|
|
[ -n "$PYENV_DEBUG" ] && set -x
|
|
|
|
VERSION_FILE="$1"
|
|
|
|
if [ -s "$VERSION_FILE" ]; then
|
|
# Read the first non-whitespace word from the specified version file.
|
|
# Be careful not to load it whole in case there's something crazy in it.
|
|
IFS="${IFS}"$'\r'
|
|
sep=
|
|
while read -n 1024 -r version _ || [[ $version ]]; do
|
|
if [[ -z $version || $version == \#* ]]; then
|
|
# Skip empty lines and comments
|
|
continue
|
|
elif [ "$version" = ".." ] || [[ $version == */* ]]; then
|
|
# The version string is used to construct a path and we skip dubious values.
|
|
# This prevents issues such as path traversal (CVE-2022-35861).
|
|
continue
|
|
fi
|
|
printf "%s%s" "$sep" "$version"
|
|
sep=:
|
|
done <"$VERSION_FILE"
|
|
[[ $sep ]] && { echo; exit; }
|
|
fi
|
|
|
|
exit 1
|