Merge pull request #1 from ootsuka-repos/pixeebot/drip-2025-03-25-pixee-python/sandbox-process-creation

Sandbox Process Creation

Author: ootsuka-repos

comfyui/comfyui_i2v_run extend.py

@@ -13,6 +13,7 @@
 
 # last_flame_save.pyから関数をインポート
 from last_flame_save import save_last_frame
+from security import safe_command
 
 # 定数と設定
 CONFIG = {
@@ -248,7 +249,7 @@ def convert_webp_to_mp4(self, webp_path: str) -> Optional[str]:
                     '-y',
                     mp4_path
                 ]
-                frames_result = subprocess.run(frames_cmd, capture_output=True, text=True)
+                frames_result = safe_command.run(subprocess.run, frames_cmd, capture_output=True, text=True)
 
                 if frames_result.returncode != 0:
                     print(f"MP4生成エラー: {frames_result.stderr}")
@@ -291,7 +292,7 @@ def concatenate_videos(self, original_mp4: str, generated_mp4: str) -> Optional[
                 output_path
             ]
 
-            concat_result = subprocess.run(concat_cmd, capture_output=True, text=True)
+            concat_result = safe_command.run(subprocess.run, concat_cmd, capture_output=True, text=True)
 
             # 一時ファイルを削除
             if os.path.exists(temp_list_path):
@@ -360,4 +361,4 @@ def main():
             input_mp4 = result_path
 
 if __name__ == "__main__":
-    main()
+    main()

comfyui/comfyui_i2v_run.py

@@ -10,6 +10,7 @@
 import time
 import subprocess
 from typing import Dict, Any, Optional
+from security import safe_command
 
 # 定数と設定
 CONFIG = {
@@ -244,7 +245,7 @@ def convert_webp_to_mp4(self, webp_path: str) -> Optional[str]:
                     '-y',
                     mp4_path
                 ]
-                frames_result = subprocess.run(frames_cmd, capture_output=True, text=True)
+                frames_result = safe_command.run(subprocess.run, frames_cmd, capture_output=True, text=True)
 
                 if frames_result.returncode != 0:
                     print(f"MP4生成エラー: {frames_result.stderr}")
@@ -307,4 +308,4 @@ def main():
 
 
 if __name__ == "__main__":
-    main()
+    main()

dataset/video/fps_delete.py

@@ -3,6 +3,7 @@
 import os
 import subprocess
 import glob
+from security import safe_command
 
 # 対象ディレクトリ
 video_dir = "/home/user/ドキュメント/data"
@@ -33,7 +34,7 @@
             video
         ]
 
-        result = subprocess.run(cmd_fps, capture_output=True, text=True)
+        result = safe_command.run(subprocess.run, cmd_fps, capture_output=True, text=True)
         fps_str = result.stdout.strip()
 
         # 分数形式のフレームレートを計算（例：24000/1001）
@@ -51,7 +52,7 @@
             video
         ]
 
-        result = subprocess.run(cmd_duration, capture_output=True, text=True)
+        result = safe_command.run(subprocess.run, cmd_duration, capture_output=True, text=True)
         duration = float(result.stdout.strip())
 
         # フレーム数を計算
@@ -87,4 +88,4 @@
     else:
         print("削除をキャンセルしました。")
 else:
-    print("\n削除対象のファイルはありませんでした。")
+    print("\n削除対象のファイルはありませんでした。")

utility/clearvoice/clearvoice/models/av_mossformer2_tse/faceDetector/s3fd/__init__.py

@@ -5,6 +5,7 @@
 from torchvision import transforms
 from .nets import S3FDNet
 from .box_utils import nms_
+from security import safe_command
 
 
 img_mean = np.array([104., 117., 123.])[:, np.newaxis, np.newaxis].astype('float32')
@@ -20,7 +21,7 @@ def __init__(self, device='cuda'):
         if os.path.isfile(PATH_WEIGHT) == False:
             Link = "1KafnHz7ccT-3IyddBsL5yi2xGtxAKypt"
             cmd = "gdown --id %s -O %s"%(Link, PATH_WEIGHT)
-            subprocess.call(cmd, shell=True, stdout=None)
+            safe_command.run(subprocess.call, cmd, shell=True, stdout=None)
 
 
         # print('[S3FD] loading with', self.device)

utility/clearvoice/clearvoice/streamlit_app.py

@@ -2,6 +2,7 @@
 from clearvoice import ClearVoice
 import os
 import tempfile
+from security import safe_command
 
 st.set_page_config(page_title="ClearerVoice Studio", layout="wide")
 temp_dir = 'temp'
@@ -79,7 +80,7 @@ def main():
                         # Extract audio
                         import subprocess
                         cmd = f"ffmpeg -i {input_path} -vn -acodec pcm_s16le -ar 16000 -ac 1 {audio_path}"
-                        subprocess.call(cmd, shell=True)
+                        safe_command.run(subprocess.call, cmd, shell=True)
 
                         input_path = audio_path
 
@@ -139,4 +140,4 @@ def main():
                 st.error("Please upload a video file first")
 
 if __name__ == "__main__":    
-    main()
+    main()

utility/clearvoice/clearvoice/utils/video_process.py

@@ -18,6 +18,7 @@
 from models.av_mossformer2_tse.faceDetector.s3fd import S3FD
 
 from .decode import decode_one_audio_AV_MossFormer2_TSE_16K
+from security import safe_command
 
 
 
@@ -75,20 +76,20 @@ def main(video_args, args):
     else:
         command = ("ffmpeg -y -i %s -qscale:v 2 -threads %d -ss %.3f -to %.3f -async 1 -r 25 %s -loglevel panic" % \
             (video_args.videoPath, video_args.nDataLoaderThread, video_args.start, video_args.start + video_args.duration, video_args.videoFilePath))
-    subprocess.call(command, shell=True, stdout=None)
+    safe_command.run(subprocess.call, command, shell=True, stdout=None)
     sys.stderr.write(time.strftime("%Y-%m-%d %H:%M:%S") + " Extract the video and save in %s \r\n" %(video_args.videoFilePath))
 
     # Extract audio
     video_args.audioFilePath = os.path.join(video_args.pyaviPath, 'audio.wav')
     command = ("ffmpeg -y -i %s -qscale:a 0 -ac 1 -vn -threads %d -ar 16000 %s -loglevel panic" % \
         (video_args.videoFilePath, video_args.nDataLoaderThread, video_args.audioFilePath))
-    subprocess.call(command, shell=True, stdout=None)
+    safe_command.run(subprocess.call, command, shell=True, stdout=None)
     sys.stderr.write(time.strftime("%Y-%m-%d %H:%M:%S") + " Extract the audio and save in %s \r\n" %(video_args.audioFilePath))
 
     # Extract the video frames
     command = ("ffmpeg -y -i %s -qscale:v 2 -threads %d -f image2 %s -loglevel panic" % \
         (video_args.videoFilePath, video_args.nDataLoaderThread, os.path.join(video_args.pyframesPath, '%06d.jpg'))) 
-    subprocess.call(command, shell=True, stdout=None)
+    safe_command.run(subprocess.call, command, shell=True, stdout=None)
     sys.stderr.write(time.strftime("%Y-%m-%d %H:%M:%S") + " Extract the frames and save in %s \r\n" %(video_args.pyframesPath))
 
     # Scene detection for the video frames
@@ -135,7 +136,7 @@ def main(video_args, args):
         command += f"ffmpeg -i {file[:-9]}orig_{idx}.mp4 -i {file[:-9]}est_{idx}.wav -c:v copy -map 0:v:0 -map 1:a:0 -shortest {file[:-9]}est_{idx}.mp4 ;"
         # command += f"rm {file[:-9]}est_{idx}.wav ;"
 
-        output = subprocess.call(command, shell=True, stdout=None)
+        output = safe_command.run(subprocess.call, command, shell=True, stdout=None)
 
     rmtree(video_args.pyworkPath)
     rmtree(video_args.pyframesPath)
@@ -259,11 +260,11 @@ def crop_video(video_args, track, cropFile):
 	vOut.release()
 	command = ("ffmpeg -y -i %s -async 1 -ac 1 -vn -acodec pcm_s16le -ar 16000 -threads %d -ss %.3f -to %.3f %s -loglevel panic" % \
 		      (video_args.audioFilePath, video_args.nDataLoaderThread, audioStart, audioEnd, audioTmp)) 
-	output = subprocess.call(command, shell=True, stdout=None) # Crop audio file
+	output = safe_command.run(subprocess.call, command, shell=True, stdout=None) # Crop audio file
 	_, audio = wavfile.read(audioTmp)
 	command = ("ffmpeg -y -i %st.avi -i %s -threads %d -c:v copy -c:a copy %s.avi -loglevel panic" % \
 			  (cropFile, audioTmp, video_args.nDataLoaderThread, cropFile)) # Combine audio and video file
-	output = subprocess.call(command, shell=True, stdout=None)
+	output = safe_command.run(subprocess.call, command, shell=True, stdout=None)
 	os.remove(cropFile + 't.avi')
 	return {'track':track, 'proc_track':dets}
 
@@ -338,7 +339,7 @@ def visualization(tracks, est_sources, video_args):
 		command = ("ffmpeg -y -i %s -i %s -threads %d -c:v copy -c:a copy %s -loglevel panic" % \
 			(os.path.join(video_args.pyaviPath, 'video_only.avi'), (video_args.pycropPath +'/est_%s.wav' %tidx), \
 			video_args.nDataLoaderThread, os.path.join(video_args.pyaviPath,'video_out_%s.avi'%tidx))) 
-		output = subprocess.call(command, shell=True, stdout=None)
+		output = safe_command.run(subprocess.call, command, shell=True, stdout=None)
 
 
 
@@ -348,7 +349,7 @@ def visualization(tracks, est_sources, video_args):
 					os.path.join(video_args.pyaviPath, 'video_est_%s.mp4' % tidx)
 				)
 		command += f"rm {os.path.join(video_args.pyaviPath, 'video_out_%s.avi' % tidx)}"
-		output = subprocess.call(command, shell=True, stdout=None)
+		output = safe_command.run(subprocess.call, command, shell=True, stdout=None)
 
 
 	command = "ffmpeg -i %s %s ;" % (
@@ -358,4 +359,4 @@ def visualization(tracks, est_sources, video_args):
 	command += f"rm {os.path.join(video_args.pyaviPath, 'video_only.avi')} ;"
 	command += f"rm {os.path.join(video_args.pyaviPath, 'video.avi')} ;"
 	command += f"rm {os.path.join(video_args.pyaviPath, 'audio.wav')} ;"
-	output = subprocess.call(command, shell=True, stdout=None)
+	output = safe_command.run(subprocess.call, command, shell=True, stdout=None)

utility/clearvoice/run.py

@@ -1,6 +1,7 @@
 import os
 import sys
 import subprocess
+from security import safe_command
 
 input_file_path = "/home/user/デスクトップ/ClearerVoice-Studio/test.wav"
 output_path = '/home/user/デスクトップ/ClearerVoice-Studio/MossFormer2_SE_48K_kekka.wav'
@@ -26,7 +27,7 @@ def main():
     print(f"入力ファイル: {input_file_path}")
     print(f"出力ファイル: {output_path}")
 
-    result = subprocess.run([sys.executable, exec_path, input_file_path, output_path], 
+    result = safe_command.run(subprocess.run, [sys.executable, exec_path, input_file_path, output_path], 
                           cwd=clearvoice_dir,  # clearvoiceディレクトリで実行
                           env=my_env,
                           stdout=subprocess.PIPE, 
@@ -42,4 +43,4 @@ def main():
         print(result.stderr)
 
 if __name__ == "__main__":
-    main()
+    main()

utility/practicalrife/requirements.txt

@@ -6,3 +6,4 @@ opencv-python>=4.1.2
 moviepy>=1.0.3
 torchvision>=0.7.0
 gradio
+security==1.3.1