ceos/unsloth
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[pre-commit.ci] auto fixes from pre-commit.com hooks

Browse source 
for more information, see https://pre-commit.ci
This commit is contained in:
pre-commit-ci[bot] 2026-05-19 12:33:42 +00:00
commit f2bbe27cde
2 changed files with 26 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

38
studio/backend/core/inference/tools.py
View file

@ -286,7 +286,7 @@ def _normalize_path_separators(text: str) -> str:
# resolves to ``~/.aws/credentials`` rather than getting eaten.
for prefix in ("~/", "$HOME/", "${HOME}/", "%USERPROFILE%/"):
if collapsed.startswith(prefix):
tail = collapsed[len(prefix):]
tail = collapsed[len(prefix) :]
tail = posixpath.normpath("/" + tail).lstrip("/")
return prefix + tail
collapsed = posixpath.normpath(collapsed)
@ -1327,9 +1327,9 @@ def _check_signal_escape_patterns(code: str):
_val = _extract_string_from_node(_assign.value)
if _val is not None:
string_bindings[_target.id] = _val
elif (
isinstance(_assign.value, ast.Name)
and _assign.value.id in ("eval", "exec")
elif isinstance(_assign.value, ast.Name) and _assign.value.id in (
"eval",
"exec",
):
eval_exec_aliases[_target.id] = _assign.value.id
@ -1385,8 +1385,14 @@ def _check_signal_escape_patterns(code: str):
_PATHLIB_PASS_THROUGH = frozenset({"expanduser", "resolve", "absolute"})
# Pathlib concrete classes that behave like Path for our purposes.
_PATHLIB_PATH_CLASSES = frozenset(
{"Path", "PurePath", "PosixPath", "WindowsPath",
"PurePosixPath", "PureWindowsPath"}
{
"Path",
"PurePath",
"PosixPath",
"WindowsPath",
"PurePosixPath",
"PureWindowsPath",
}
)
def _extract_pathlib_target(node, path_aliases, pathlib_aliases, _depth = 0):
@ -1440,10 +1446,9 @@ def _check_signal_escape_patterns(code: str):
# ``Path.home()`` (and aliases) resolves to ``~`` so
# ``Path.home() / '.aws/credentials'`` reaches the
# ``~/.aws/credentials`` home-anchored regex below.
if (
ctor_fq in {f"{a}.home" for a in path_aliases}
or ctor_fq in {f"{a}.Path.home" for a in pathlib_aliases}
):
if ctor_fq in {f"{a}.home" for a in path_aliases} or ctor_fq in {
f"{a}.Path.home" for a in pathlib_aliases
}:
return "~"
is_path_ctor = ctor_fq in path_aliases or any(
ctor_fq == f"{alias}.{cls}"
@ -2659,10 +2664,15 @@ def _check_signal_escape_patterns(code: str):
# ``open()`` does, and the copy gives the attacker a second
# exfil channel (rename/print/upload the destination). Gate
# the source argument with the same sensitive-path checks.
_FILE_COPY_FUNCS = frozenset({
"shutil.copyfile", "shutil.copy", "shutil.copy2",
"shutil.copytree", "shutil.move",
})
_FILE_COPY_FUNCS = frozenset(
{
"shutil.copyfile",
"shutil.copy",
"shutil.copy2",
"shutil.copytree",
"shutil.move",
}
)
if fq in _FILE_COPY_FUNCS:
src_lit = None
if node.args:

8
studio/backend/tests/test_sandbox_hardening.py
View file

@ -1032,9 +1032,7 @@ class TestR3Finding1_ParentDirNormalisation:
],
)
def test_parent_dir_legit_allowed(self, cmd):
assert not _find_sensitive_paths(cmd), (
f"legit parent-dir path blocked: {cmd!r}"
)
assert not _find_sensitive_paths(cmd), f"legit parent-dir path blocked: {cmd!r}"
class TestR3Finding2_OpenPathLike:
@ -1308,6 +1306,4 @@ class TestR3Finding22_RequestsRequestPositionalKeyword:
],
)
def test_request_method_then_kw_trusted_url_allowed(self, code):
assert not _is_blocked(code), (
f"trusted method+kw blocked: {code!r}"
)
assert not _is_blocked(code), f"trusted method+kw blocked: {code!r}"