---
source: crates/ruff_linter/src/rules/flake8_bandit/mod.rs
---
S609 Possible wildcard injection in call due to `*` usage
 --> S609.py:4:10
  |
2 | import subprocess
3 |
4 | os.popen("chmod +w foo*")
  |          ^^^^^^^^^^^^^^^
5 | subprocess.Popen("/bin/chown root: *", shell=True)
6 | subprocess.Popen(["/usr/local/bin/rsync", "*", "some_where:"], shell=True)
  |

S609 Possible wildcard injection in call due to `*` usage
 --> S609.py:5:18
  |
4 | os.popen("chmod +w foo*")
5 | subprocess.Popen("/bin/chown root: *", shell=True)
  |                  ^^^^^^^^^^^^^^^^^^^^
6 | subprocess.Popen(["/usr/local/bin/rsync", "*", "some_where:"], shell=True)
7 | subprocess.Popen("/usr/local/bin/rsync * no_injection_here:")
  |

S609 Possible wildcard injection in call due to `*` usage
 --> S609.py:6:18
  |
4 | os.popen("chmod +w foo*")
5 | subprocess.Popen("/bin/chown root: *", shell=True)
6 | subprocess.Popen(["/usr/local/bin/rsync", "*", "some_where:"], shell=True)
  |                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7 | subprocess.Popen("/usr/local/bin/rsync * no_injection_here:")
8 | os.system("tar cf foo.tar bar/*")
  |

S609 Possible wildcard injection in call due to `*` usage
  --> S609.py:8:11
   |
 6 | subprocess.Popen(["/usr/local/bin/rsync", "*", "some_where:"], shell=True)
 7 | subprocess.Popen("/usr/local/bin/rsync * no_injection_here:")
 8 | os.system("tar cf foo.tar bar/*")
   |           ^^^^^^^^^^^^^^^^^^^^^^
 9 |
10 | subprocess.Popen(["chmod", "+w", "*.py"], shell={**{}})
   |

S609 Possible wildcard injection in call due to `*` usage
  --> S609.py:14:18
   |
13 | # Additional truthiness cases for generator, lambda, and f-strings
14 | subprocess.Popen("chmod +w foo*", shell=(i for i in ()))
   |                  ^^^^^^^^^^^^^^^
15 | subprocess.Popen("chmod +w foo*", shell=lambda: 0)
16 | subprocess.Popen("chmod +w foo*", shell=f"{b''}")
   |

S609 Possible wildcard injection in call due to `*` usage
  --> S609.py:15:18
   |
13 | # Additional truthiness cases for generator, lambda, and f-strings
14 | subprocess.Popen("chmod +w foo*", shell=(i for i in ()))
15 | subprocess.Popen("chmod +w foo*", shell=lambda: 0)
   |                  ^^^^^^^^^^^^^^^
16 | subprocess.Popen("chmod +w foo*", shell=f"{b''}")
17 | x = 1
   |

S609 Possible wildcard injection in call due to `*` usage
  --> S609.py:16:18
   |
14 | subprocess.Popen("chmod +w foo*", shell=(i for i in ()))
15 | subprocess.Popen("chmod +w foo*", shell=lambda: 0)
16 | subprocess.Popen("chmod +w foo*", shell=f"{b''}")
   |                  ^^^^^^^^^^^^^^^
17 | x = 1
18 | subprocess.Popen("chmod +w foo*", shell=f"{x=}")
   |

S609 Possible wildcard injection in call due to `*` usage
  --> S609.py:18:18
   |
16 | subprocess.Popen("chmod +w foo*", shell=f"{b''}")
17 | x = 1
18 | subprocess.Popen("chmod +w foo*", shell=f"{x=}")
   |                  ^^^^^^^^^^^^^^^
   |
