diff options
| author | Alex Gaynor <alex.gaynor@gmail.com> | 2015-09-09 22:16:37 -0400 |
|---|---|---|
| committer | Alex Gaynor <alex.gaynor@gmail.com> | 2015-09-09 22:16:37 -0400 |
| commit | 41aabcbd2326ae154a16a1a050ee01fb9a54bd19 (patch) | |
| tree | ccf75d196d12b27d899ef2c8a45bca406db63682 | |
| parent | 948ba5d4ff4ee7a8f7554af123e97ab580aa50a2 (diff) | |
| download | cryptography-41aabcbd2326ae154a16a1a050ee01fb9a54bd19.tar.gz cryptography-41aabcbd2326ae154a16a1a050ee01fb9a54bd19.tar.bz2 cryptography-41aabcbd2326ae154a16a1a050ee01fb9a54bd19.zip | |
Don't use pipes
Download the whole file first, @glyph points out that truncation attacks are a thing.
| -rwxr-xr-x | .travis/upload_coverage.sh | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/.travis/upload_coverage.sh b/.travis/upload_coverage.sh index 554116f7..62489560 100755 --- a/.travis/upload_coverage.sh +++ b/.travis/upload_coverage.sh @@ -6,5 +6,6 @@ set -x NO_COVERAGE_TOXENVS=(pypy pypy3 pep8 py3pep8 docs) if ! [[ "${NO_COVERAGE_TOXENVS[*]}" =~ "${TOXENV}" ]]; then source ~/.venv/bin/activate - bash <(curl -s https://codecov.io/bash) -e TRAVIS_OS_NAME,TOXENV,OPENSSL + wget https://codecov.io/bash -O codecov.sh + bash codecov.sh -e TRAVIS_OS_NAME,TOXENV,OPENSSL fi |