ceos/unsloth
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[pre-commit.ci] auto fixes from pre-commit.com hooks

Browse source 
for more information, see https://pre-commit.ci
This commit is contained in:
pre-commit-ci[bot] 2026-07-22 00:47:11 +00:00
commit 7ef07b2495
2 changed files with 12 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

20
studio/backend/core/inference/tools.py
View file

@ -986,9 +986,7 @@ def _python_payload_launches_startup_bypass(
assigns = [
n
for n in ast.walk(tree)
if isinstance(n, ast.Assign)
and len(n.targets) == 1
and isinstance(n.targets[0], ast.Name)
if isinstance(n, ast.Assign) and len(n.targets) == 1 and isinstance(n.targets[0], ast.Name)
]
changed = True
while changed:
@ -1037,10 +1035,16 @@ def _python_payload_launches_startup_bypass(
if value.id in launcher_aliases and name not in launcher_aliases:
launcher_aliases.add(name)
changed = True
elif value.id in os_exec_aliases and os_exec_aliases.get(name) != os_exec_aliases[value.id]:
elif (
value.id in os_exec_aliases
and os_exec_aliases.get(name) != os_exec_aliases[value.id]
):
os_exec_aliases[name] = os_exec_aliases[value.id]
changed = True
elif value.id in argv_list_launcher_aliases and name not in argv_list_launcher_aliases:
elif (
value.id in argv_list_launcher_aliases
and name not in argv_list_launcher_aliases
):
argv_list_launcher_aliases.add(name)
changed = True
elif value.id in asyncio_exec_aliases and name not in asyncio_exec_aliases:
@ -1057,11 +1061,7 @@ def _python_payload_launches_startup_bypass(
# Recurse into a statically-known ``exec``/``eval`` string payload so a
# child launch hidden inside ``exec("... subprocess.run([...]) ...")`` is
# scanned rather than treated as an opaque call.
if (
isinstance(node.func, ast.Name)
and node.func.id in {"exec", "eval"}
and node.args
):
if isinstance(node.func, ast.Name) and node.func.id in {"exec", "eval"} and node.args:
inner = _static_python_string(node.args[0])
if inner is not None and _python_payload_launches_startup_bypass(
inner, depth + 1, environment_tainted

4
studio/backend/tests/test_bypass_permissions.py
View file

@ -227,13 +227,13 @@ def test_bash_blocklist_enforced_when_sandboxed(captured_popen):
# A child launch hidden inside a static ``exec`` string payload.
(
"python -c \"exec('import subprocess; "
"subprocess.run([\\\"python\\\",\\\"-S\\\",\\\"-c\\\",\\\"import boto3\\\"])')\""
'subprocess.run([\\"python\\",\\"-S\\",\\"-c\\",\\"import boto3\\"])\')"'
),
# Non-subprocess child launchers (pty.spawn / asyncio) skip sitecustomize
# in the child too.
"python -c \"import pty; pty.spawn(['python','-S','-c','import boto3'])\"",
(
"python -c \"import asyncio; "
'python -c "import asyncio; '
"asyncio.create_subprocess_exec('python','-S','-c','import boto3')\""
),
],