Skip to content
This repository was archived by the owner on Apr 26, 2025. It is now read-only.

huntr.dev - Command Injection Fix #36

Open
huntr-helper wants to merge 4 commits into
base: master
Choose a base branch
from
Open

huntr.dev - Command Injection Fix #36

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
04c9f0e
Fixed Command Injection
mufeedvh May 8, 2020
c2cd8de
full cmd needs to be given to the logger()
mufeedvh May 8, 2020
6528f23
minor fix
mufeedvh May 8, 2020
ce89681
Merge pull request #1 from mufeedvh/master
huntr-helper May 15, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 8 additions & 4 deletions index.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
'use strict';

var chalk = require('chalk');
var exec = require('child_process').exec;
var execFile = require('child_process').execFile;
var fsx = require('fs-extra');
var globby = require('globby');
var path = require('path');
Expand Down Expand Up @@ -122,13 +122,17 @@ function buildRpm(buildRoot, specFile, rpmDest, execOpts, cb) {
'--buildroot',
buildRoot,
specFile
].join(' ');

];

var cmdFile = cmd[0];

logger(chalk.cyan('Executing:'), cmd);

cmd.shift();

execOpts = execOpts || {};

exec(cmd, execOpts, function rpmbuild(err, stdout) {
execFile(cmdFile, cmd, execOpts, function rpmbuild(err, stdout) {

if (err) {
return cb(err);
Expand Down