wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-07 04:30:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Code review feedback: reject additional shell metacharacters.

Browse Source
This commit is contained in:
Kareem
2026-06-26 07:04:52 -07:00
parent 414c0dec92
commit 85bb45118d
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
configure.ac
+6 -6
View File
@@ -12512,13 +12512,13 @@ fi
prefix=$WOLFSSL_PREFIX_ABS
exec_prefix=$WOLFSSL_EXEC_PREFIX_ABS
# The eval calls below expand ${prefix}/${exec_prefix} references embedded in
# the libdir/includedir values. eval would, however, also execute any shell
# command substitution contained in a --libdir/--includedir value (e.g.
# --libdir='$(cmd)/lib'), running arbitrary commands during configure.
# Reject values that contain command substitution before the eval.
# the libdir/includedir values. eval would, however, also execute or be
# subverted by shell metacharacters in a --libdir/--includedir value (command
# substitution, quote breakout, command separators, etc.), running arbitrary
# commands during configure. Reject such values before the eval.
case "$libdir $includedir" in
*'`'* | *'$('*)
AC_MSG_ERROR([--libdir and --includedir must not contain shell command substitution])
*'`'* | *'$('* | *'"'* | *"'"* | *';'* | *'&'* | *'|'* | *'<'* | *'>'* | *'\'* )
AC_MSG_ERROR([--libdir and --includedir must not contain shell metacharacters])
;;
esac
eval WOLFSSL_LIBDIR_ABS=\"$libdir\"