[Pkg-owncloud-commits] [owncloud] 03/06: Disallow semicolons in passed commands

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to annotated tag v6.0.8RC2
in repository owncloud.

commit 84fcf806646ee59090fb8d18e0e7b1934c788e9a
Author: Lukas Reschke <lukas at owncloud.com>
Date:   Mon Mar 30 21:51:57 2015 +0200

    Disallow semicolons in passed commands
---
 apps/files_external/3rdparty/smb4php/smb.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/apps/files_external/3rdparty/smb4php/smb.php b/apps/files_external/3rdparty/smb4php/smb.php
index d43a1ea..456f1a1 100644
--- a/apps/files_external/3rdparty/smb4php/smb.php
+++ b/apps/files_external/3rdparty/smb4php/smb.php
@@ -76,6 +76,11 @@ class smb {
 
 
 	function execute ($command, $purl) {
+		if (strpos($command,';') !== false) {
+			trigger_error('Semicolon not supported in commands');
+			exit();
+		}
+
 		return smb::client ('-d 0 '
 				. escapeshellarg ('//' . $purl['host'] . '/' . $purl['share'])
 				. ' -c ' . escapeshellarg ($command), $purl

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git