commit f87cc0af4d9710d83041bf3bc499032e5b0c241c
author Yunyun Lin <linyuny@google.com> Wed Jun 08 16:57:04 2022 -0700
committer linyy1106 <linyuny@google.com> Thu Jun 09 10:27:26 2022 -0700
tree a7b1d2e2215f717d60dfaf39e0a189870d2bcf0d
parent 765535ac0394f52d4d396f31a37fc06f623c5d94

Vulnerability fix for yaml load

Change-Id: Id619d1d16c8c70fbf9049105a2222b4ffa456a3e
Signed-off-by: linyy1106 <linyuny@google.com>

bin/generate_inventory

diff --git a/bin/generate_inventory b/bin/generate_inventory
index b56d22e..880777c 100755
--- a/bin/generate_inventory
+++ b/bin/generate_inventory
@@ -75,7 +75,7 @@
         # Get the yaml dictionary data
         print_timen("Loading " + yaml_file_path)
         f = open(yaml_file_path)
-        yaml_data = yaml.load(f)
+        yaml_data = yaml.safe_load(f)
         f.close()
         for item in range(0, len(yaml_data['properties'])):
             tmp_data = yaml_data['properties'][item]['name']