[Pkg-owncloud-commits] [owncloud] 06/12: Disallow semicolons in passed commands

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to branch master
in repository owncloud.

commit 200e9d949783efbd57f39acedebc03924c1dfff4
Author: Lukas Reschke <lukas at owncloud.com>
Date:   Mon Mar 30 21:51:57 2015 +0200

    Disallow semicolons in passed commands
---
 apps/files_external/3rdparty/smb4php/smb.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/apps/files_external/3rdparty/smb4php/smb.php b/apps/files_external/3rdparty/smb4php/smb.php
index e325506..7ffdb42 100644
--- a/apps/files_external/3rdparty/smb4php/smb.php
+++ b/apps/files_external/3rdparty/smb4php/smb.php
@@ -112,6 +112,11 @@ class smb {
 
 
 	function execute ($command, $purl, $regexp = NULL) {
+		if (strpos($command,';') !== false) {
+			trigger_error('Semicolon not supported in commands');
+			exit();
+		}
+
 		return smb::client ('-d 0 '
 				. escapeshellarg ('//' . $purl['host'] . '/' . $purl['share'])
 				. ' -c ' . escapeshellarg ($command), $purl, $regexp

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git