Build #3

Plan branch:

Build: #3 failed Manual run by Akeem Wells

Build result summary

Details

Completed
Queue duration
15 seconds
Duration
3 minutes
Labels
None
Revisions
Casa6
9eede3a21f1d4e6e61185ac7568ebc0a3563656f
OPEN-CASA-PKG
e5285e68467f01199807a1f1a978aec8a4781be7
Total tests
360

Tests

Responsible

No one has taken responsibility for this failure

Code commits

Casa6
Author Commit Message Commit date
Srikrishna Sekhar Srikrishna Sekhar 9eede3a21f1d4e6e61185ac7568ebc0a3563656f Pull request #1056: CAS-13898
Merge in CASA/casa6 from CAS-13898 to master

* commit '81f8d50803a4f8d4ceb2d5dfecd8e67f25d11658':
  CAS-13898 : Fix memory allocation per-plane
  CAS-13898 : Re-use getMemoryAvailable from appRC
  CAS-13898 : remove unnecessary temp image allocs
Dirk Petry <dpetry@eso.org> Dirk Petry <dpetry@eso.org> 7942d3c489c3dd85ce20bcfce026db5ee274f373 Pull request #1057: CAS-14808: improved task messaging, added unit test case testSky_sdObs_noise, updated stakeholder tests
Merge in CASA/casa6 from CAS-14808 to master

* commit 'fd028a1e11a9a712747c80c3508fd96597a93a87':
  CAS-14808: improved task messaging, added unit test case testSky_sdObs_noise, updated stakeholder tests
Bob Garwood Bob Garwood 350d94ec32491983c2ac6a838a3d80a0a5c85748 Pull request #1058: CAS-14743
Merge in CASA/casa6 from CAS-14743 to master

* commit 'cf36a43bb30fdb33b15f44d8c7f1102b036e1475':
  remove hosts example
  fixed two typos
  updated getandposalma.xml
  additional edits of getantposalma.xml descriptions
  edited getantposalma.xml short and long parameter descriptions
Dirk Petry <dpetry@eso.org> Dirk Petry <dpetry@eso.org> fd028a1e11a9a712747c80c3508fd96597a93a87 CAS-14808: improved task messaging, added unit test case testSky_sdObs_noise, updated stakeholder tests
Bob Garwood Bob Garwood cf36a43bb30fdb33b15f44d8c7f1102b036e1475 m remove hosts example

40 more changes...

Tests

Existing test failures 230
Status Test Failing since View job Duration 
LOW: subprocess call - check for execution of untrusted input.
Test ID: B603
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/setup.py:121
Code: 121
subprocess call - check for execution of untrusted input.
(1 more lines...)
 
LOW: Consider possible security implications associated with pickle module.
Test ID: B403
Severity: LOW
Confidence: HIGH
CWE: 502 (https://cwe.mitre.org/data/definitions/502.html)
Location: /wheeldirectory/casa6/casatasks/setup.py:82
Code: 82
Consider possible security implications associated with pickle module.
(1 more lines...)
 
LOW: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/setup.py:75
Code: 75
Consider possible security implications associated with the subprocess module.
(1 more lines...)
 
MEDIUM: Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
Test ID: B310
Severity: MEDIUM
Confidence: HIGH
CWE: 22 (https://cwe.mitre.org/data/definitions/22.html)
Location: /wheeldirectory/casa6/casatasks/setup.py:421
Code: 421
Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
(1 more lines...)
 
MEDIUM: Use of exec detected.
Test ID: B102
Severity: MEDIUM
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/callibrary.py:303
Code: 303
Use of exec detected.
(1 more lines...)
 
LOW: Using minidom to parse untrusted XML data is known to be vulnerable to XML attacks. Replace minidom with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.
Test ID: B408
Severity: LOW
Confidence: HIGH
CWE: 20 (https://cwe.mitre.org/data/definitions/20.html)
Location: /wheeldirectory/casa6/casatasks/src/private/casaxmlutil.py:4
Code: 4
Using minidom to parse untrusted XML data is known to be vulnerable to XML attacks. Replace minidom with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.
(1 more lines...)
 
MEDIUM: Use of exec detected.
Test ID: B102
Severity: MEDIUM
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/casaxmlutil.py:158
Code: 158
Use of exec detected.
(1 more lines...)
 
MEDIUM: Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called
Test ID: B318
Severity: MEDIUM
Confidence: HIGH
CWE: 20 (https://cwe.mitre.org/data/definitions/20.html)
Location: /wheeldirectory/casa6/casatasks/src/private/casaxmlutil.py:182
Code: 182
Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/cleanhelper.py:479
Code: 479
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
LOW: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/cleanhelper.py:11
Code: 11
Consider possible security implications associated with the subprocess module.
(1 more lines...)
 
LOW: Try, Except, Pass detected.
Test ID: B110
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/cleanhelper.py:295
Code: 295
Try, Except, Pass detected.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/concatephem.py:123
Code: 123
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/convertephem.py:141
Code: 141
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
MEDIUM: Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
Test ID: B310
Severity: MEDIUM
Confidence: HIGH
CWE: 22 (https://cwe.mitre.org/data/definitions/22.html)
Location: /wheeldirectory/casa6/casatasks/src/private/correct_ant_posns_evla.py:97
Code: 97
Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
(1 more lines...)
 
LOW: Using minidom to parse untrusted XML data is known to be vulnerable to XML attacks. Replace minidom with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.
Test ID: B408
Severity: LOW
Confidence: HIGH
CWE: 20 (https://cwe.mitre.org/data/definitions/20.html)
Location: /wheeldirectory/casa6/casatasks/src/private/flaghelper.py:1962
Code: 1962
Using minidom to parse untrusted XML data is known to be vulnerable to XML attacks. Replace minidom with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/flaghelper.py:1038
Code: 1038
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
MEDIUM: Use of possibly insecure function - consider using safer ast.literal_eval.
Test ID: B307
Severity: MEDIUM
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/flaghelper.py:982
Code: 982
Use of possibly insecure function - consider using safer ast.literal_eval.
(1 more lines...)
 
MEDIUM: Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called
Test ID: B318
Severity: MEDIUM
Confidence: HIGH
CWE: 20 (https://cwe.mitre.org/data/definitions/20.html)
Location: /wheeldirectory/casa6/casatasks/src/private/flaghelper.py:1986
Code: 1986
Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called
(1 more lines...)
 
LOW: Try, Except, Pass detected.
Test ID: B110
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/ialib.py:44
Code: 44
Try, Except, Pass detected.
(1 more lines...)
 
LOW: Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Test ID: B101
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/imagerhelpers/_gclean.py:2164
Code: 2164
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
(1 more lines...)
 
LOW: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/imagerhelpers/_gclean.py:47
Code: 47
Consider possible security implications associated with the subprocess module.
(1 more lines...)
 
LOW: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/imagerhelpers/imager_parallel_cube.py:333
Code: 333
Consider possible security implications associated with the subprocess module.
(1 more lines...)
 
MEDIUM: Use of possibly insecure function - consider using safer ast.literal_eval.
Test ID: B307
Severity: MEDIUM
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/imagerhelpers/input_parameters.py:922
Code: 922
Use of possibly insecure function - consider using safer ast.literal_eval.
(1 more lines...)
 
MEDIUM: Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
Test ID: B310
Severity: MEDIUM
Confidence: HIGH
CWE: 22 (https://cwe.mitre.org/data/definitions/22.html)
Location: /wheeldirectory/casa6/casatasks/src/private/jplhorizons_query.py:185
Code: 185
Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
(1 more lines...)
 
LOW: Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Test ID: B101
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/jyperk.py:49
Code: 49
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
(1 more lines...)
 
MEDIUM: Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
Test ID: B310
Severity: MEDIUM
Confidence: HIGH
CWE: 22 (https://cwe.mitre.org/data/definitions/22.html)
Location: /wheeldirectory/casa6/casatasks/src/private/jyperk.py:507
Code: 507
Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
(1 more lines...)
 
LOW: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/mslisthelper.py:7
Code: 7
Consider possible security implications associated with the subprocess module.
(1 more lines...)
 
LOW: Try, Except, Pass detected.
Test ID: B110
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/mstools.py:59
Code: 59
Try, Except, Pass detected.
(1 more lines...)
 
LOW: Starting a process with a partial executable path
Test ID: B607
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/parallel/parallel_data_helper.py:1611
Code: 1611
Starting a process with a partial executable path
(1 more lines...)
 
LOW: subprocess call - check for execution of untrusted input.
Test ID: B603
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/parallel/parallel_data_helper.py:1611
Code: 1611
subprocess call - check for execution of untrusted input.
(1 more lines...)
 
LOW: Try, Except, Pass detected.
Test ID: B110
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/parallel/parallel_data_helper.py:1618
Code: 1618
Try, Except, Pass detected.
(1 more lines...)
 
LOW: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/parallel/parallel_data_helper.py:8
Code: 8
Consider possible security implications associated with the subprocess module.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/parallel/parallel_data_helper.py:597
Code: 597
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
MEDIUM: Use of exec detected.
Test ID: B102
Severity: MEDIUM
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/parallel/parallel_task_helper.py:248
Code: 248
Use of exec detected.
(1 more lines...)
 
MEDIUM: Use of possibly insecure function - consider using safer ast.literal_eval.
Test ID: B307
Severity: MEDIUM
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/parallel/parallel_task_helper.py:657
Code: 657
Use of possibly insecure function - consider using safer ast.literal_eval.
(1 more lines...)
 
MEDIUM: Probable insecure usage of temp file/directory.
Test ID: B108
Severity: MEDIUM
Confidence: MEDIUM
CWE: 377 (https://cwe.mitre.org/data/definitions/377.html)
Location: /wheeldirectory/casa6/casatasks/src/private/partitionhelper.py:36
Code: 36
Probable insecure usage of temp file/directory.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/partitionhelper.py:125
Code: 125
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
HIGH: subprocess call with shell=True identified, security issue.
Test ID: B602
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/partitionhelper.py:699
Code: 699
subprocess call with shell=True identified, security issue.
(1 more lines...)
 
LOW: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/partitionhelper.py:13
Code: 13
Consider possible security implications associated with the subprocess module.
(1 more lines...)
 
LOW: Standard pseudo-random generators are not suitable for security/cryptographic purposes.
Test ID: B311
Severity: LOW
Confidence: HIGH
CWE: 330 (https://cwe.mitre.org/data/definitions/330.html)
Location: /wheeldirectory/casa6/casatasks/src/private/sdint_helper.py:19
Code: 19
Standard pseudo-random generators are not suitable for security/cryptographic purposes.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/sdint_helper.py:38
Code: 38
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
LOW: Try, Except, Continue detected.
Test ID: B112
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/setjy_helper.py:126
Code: 126
Try, Except, Continue detected.
(1 more lines...)
 
MEDIUM: Probable insecure usage of temp file/directory.
Test ID: B108
Severity: MEDIUM
Confidence: MEDIUM
CWE: 377 (https://cwe.mitre.org/data/definitions/377.html)
Location: /wheeldirectory/casa6/casatasks/src/private/setjy_helper.py:515
Code: 515
Probable insecure usage of temp file/directory.
(1 more lines...)
 
LOW: Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Test ID: B101
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/simutil.py:3311
Code: 3311
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/task_apparentsens.py:29
Code: 29
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/task_concat.py:274
Code: 274
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/task_conjugatevis.py:62
Code: 62
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)
 
LOW: Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Test ID: B101
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/task_cvel.py:193
Code: 193
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
(1 more lines...)
 
LOW: Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Test ID: B101
Severity: LOW
Confidence: HIGH
CWE: 703 (https://cwe.mitre.org/data/definitions/703.html)
Location: /wheeldirectory/casa6/casatasks/src/private/task_cvel2.py:45
Code: 45
Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
(1 more lines...)
 
HIGH: Starting a process with a shell, possible injection detected, security issue.
Test ID: B605
Severity: HIGH
Confidence: HIGH
CWE: 78 (https://cwe.mitre.org/data/definitions/78.html)
Location: /wheeldirectory/casa6/casatasks/src/private/task_exportasdm.py:80
Code: 80
Starting a process with a shell, possible injection detected, security issue.
(1 more lines...)

Jira issues

IssueDescriptionStatus
4 more issues…
Unknown Issue TypeCAS-13898Could not obtain issue details from Jira
Unknown Issue TypeCAS-14622Could not obtain issue details from Jira
Unknown Issue TypeCAS-14694Could not obtain issue details from Jira
Unknown Issue TypeCAS-14743Could not obtain issue details from Jira
Unknown Issue TypeCAS-14747Could not obtain issue details from Jira

Shared artifacts

Artifact File size
vulnerabilities.xml 8 KB
requirements.txt 1 KB