wehub-resource-sync
e904b667c6
PaddleOCR PR Tests GPU / test-pr-gpu (push) Blocked by required conditions
PaddleOCR PR Tests / test-pr (push) Blocked by required conditions
PaddleOCR PR Tests / test-pr-python (3.8) (push) Waiting to run
Build/Publish Develop Docs / deploy (push) Failing after 1s
PaddleOCR Code Style Check / check-code-style (push) Failing after 1s
PaddleOCR PR Tests GPU / detect-changes (push) Failing after 1s
PaddleOCR PR Tests GPU / test-pr-gpu-impl (push) Waiting to run
PaddleOCR PR Tests / detect-changes (push) Failing after 1s
PaddleOCR PR Tests / test-pr-python (3.13) (push) Waiting to run
PaddleOCR PR Tests / test-pr-python (3.9) (push) Waiting to run
96 lines
3.3 KiB
Python
96 lines
3.3 KiB
Python
# Copyright (c) 2026 PaddlePaddle Authors. All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
import importlib.util
|
|
import sys
|
|
import types
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
import yaml
|
|
|
|
REPO_ROOT = Path(__file__).resolve().parents[2]
|
|
|
|
|
|
def _stub_module(monkeypatch, name, **attrs):
|
|
module = types.ModuleType(name)
|
|
for key, value in attrs.items():
|
|
setattr(module, key, value)
|
|
monkeypatch.setitem(sys.modules, name, module)
|
|
return module
|
|
|
|
|
|
def _load_tools_program_module(monkeypatch):
|
|
_stub_module(monkeypatch, "paddle")
|
|
_stub_module(monkeypatch, "paddle.distributed")
|
|
_stub_module(monkeypatch, "cv2")
|
|
_stub_module(monkeypatch, "numpy")
|
|
_stub_module(monkeypatch, "tqdm", tqdm=lambda *args, **kwargs: None)
|
|
_stub_module(monkeypatch, "ppocr")
|
|
_stub_module(monkeypatch, "ppocr.utils")
|
|
_stub_module(monkeypatch, "ppocr.utils.stats", TrainingStats=object)
|
|
_stub_module(
|
|
monkeypatch, "ppocr.utils.save_load", save_model=lambda *args, **kwargs: None
|
|
)
|
|
_stub_module(
|
|
monkeypatch,
|
|
"ppocr.utils.utility",
|
|
print_dict=lambda *args, **kwargs: None,
|
|
AverageMeter=object,
|
|
)
|
|
_stub_module(
|
|
monkeypatch, "ppocr.utils.logging", get_logger=lambda *args, **kwargs: None
|
|
)
|
|
_stub_module(monkeypatch, "ppocr.utils.loggers", WandbLogger=object, Loggers=object)
|
|
_stub_module(monkeypatch, "ppocr.utils.profiler")
|
|
_stub_module(
|
|
monkeypatch, "ppocr.data", build_dataloader=lambda *args, **kwargs: None
|
|
)
|
|
_stub_module(
|
|
monkeypatch, "ppocr.utils.export_model", export=lambda *args, **kwargs: None
|
|
)
|
|
|
|
module_name = "paddleocr_tools_program"
|
|
spec = importlib.util.spec_from_file_location(
|
|
module_name, REPO_ROOT / "tools" / "program.py"
|
|
)
|
|
module = importlib.util.module_from_spec(spec)
|
|
monkeypatch.setitem(sys.modules, module_name, module)
|
|
spec.loader.exec_module(module)
|
|
return module
|
|
|
|
|
|
def test_tools_program_load_config_rejects_python_object_tags(tmp_path, monkeypatch):
|
|
module = _load_tools_program_module(monkeypatch)
|
|
payload = (
|
|
'!!python/object/apply:os.system ["echo SHOULD_NOT_RUN > '
|
|
'/tmp/paddleocr_tools_program_test"]\n'
|
|
)
|
|
config_path = tmp_path / "malicious.yml"
|
|
config_path.write_text(payload, encoding="utf-8")
|
|
|
|
with pytest.raises(yaml.constructor.ConstructorError):
|
|
module.load_config(str(config_path))
|
|
|
|
|
|
def test_tools_program_parse_opt_rejects_python_object_tags(monkeypatch):
|
|
parser = _load_tools_program_module(monkeypatch).ArgsParser()
|
|
malicious_opt = [
|
|
'Global.debug=!!python/object/apply:os.system ["echo SHOULD_NOT_RUN > '
|
|
'/tmp/paddleocr_opt_test"]'
|
|
]
|
|
|
|
with pytest.raises(yaml.constructor.ConstructorError):
|
|
parser._parse_opt(malicious_opt)
|