[libc] Use yaml.safe_load rather than yaml.load

[petrhosek]

yaml.load is considered unsafe, use yaml.safe_load.

[llvmbot]

@llvm/pr-subscribers-libc

Author: Petr Hosek (petrhosek)

Changes

yaml.load is considered unsafe, use yaml.safe_load.

---

Full diff: https://github.com/llvm/llvm-project/pull/109557.diff

1 Files Affected:

• (modified) libc/newhdrgen/yaml_functions_sorted.py (+1-1)

diff --git a/libc/newhdrgen/yaml_functions_sorted.py b/libc/newhdrgen/yaml_functions_sorted.py
index db19edf7481de2..b960ecaf973f52 100644
--- a/libc/newhdrgen/yaml_functions_sorted.py
+++ b/libc/newhdrgen/yaml_functions_sorted.py
@@ -6,7 +6,7 @@
 
 def sort_yaml_functions(yaml_file):
     with open(yaml_file, "r") as f:
-        yaml_data = yaml.load(f, Loader=yaml.FullLoader)
+        yaml_data = yaml.safe_load(f)
 
     if "functions" in yaml_data:
         yaml_data["functions"].sort(key=lambda x: x["name"])

[jhuber6]

I thought we deliberately used yaml.load because it was available within the Python version required for LLVM? I guess we'll see if the NVPTX bot breaks because of this.

[petrhosek]

We already switched to yaml.safe_load elsewhere in #105374 and haven't seen any breakages.

[jhuber6]

Bot was fine with it, so no problems here. https://lab.llvm.org/buildbot/#/builders/69/builds/5888