clearlinux/micro-config-drive
2
0
Fork 0
mirror of https://github.com/clearlinux/micro-config-drive.git synced 2026-09-04 20:51:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix security hole escaping special characters

Browse Source 
fix possible command injection
This commit is contained in:
Julio Montes
2016-02-05 15:54:25 -06:00
parent f569128eb3
commit 3aaaadf9dc
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/lib.c
+4 -1
View File
@@ -83,12 +83,15 @@ void LOG(const char *fmt, ...) {
bool exec_task(const gchar* command_line) {
gchar* standard_output = NULL;
gchar* standard_error = NULL;
gchar* cmd_line = NULL;
GError* error = NULL;
gint exit_status = 0;
gboolean result;
GString* command;
command = g_string_new("");
g_string_printf(command, SHELL_PATH " -c \"%s\"", (char*)command_line );
cmd_line = g_strescape(command_line, NULL);
g_string_printf(command, SHELL_PATH " -c \"%s\"", cmd_line );
g_free(cmd_line);
LOG(MOD "Executing: %s\n", command->str);
result = g_spawn_command_line_sync(command->str,