Merge pull request #1079 from Varbin/1078-path-spaces

Quote binary variables during SUID/GID enumeration
This commit is contained in:
Michael Boelen 2020-12-15 14:11:08 +01:00 committed by GitHub
commit 6e14b73b0c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -119,11 +119,11 @@
COUNT=$((COUNT + 1)) COUNT=$((COUNT + 1))
BINARY="${SCANDIR}/${FILENAME}" BINARY="${SCANDIR}/${FILENAME}"
DISCOVERED_BINARIES="${DISCOVERED_BINARIES}${BINARY} " DISCOVERED_BINARIES="${DISCOVERED_BINARIES}${BINARY} "
if [ -u ${BINARY} ]; then if [ -u "${BINARY}" ]; then
NSUID_BINARIES=$((NSUID_BINARIES + 1)) NSUID_BINARIES=$((NSUID_BINARIES + 1))
SUID_BINARIES="${SUID_BINARIES}${BINARY} " SUID_BINARIES="${SUID_BINARIES}${BINARY} "
fi fi
if [ -g ${BINARY} ]; then if [ -g "${BINARY}" ]; then
NSGID_BINARIES=$((NSGID_BINARIES + 1)) NSGID_BINARIES=$((NSGID_BINARIES + 1))
SGID_BINARIES="${SGID_BINARIES}${BINARY} " SGID_BINARIES="${SGID_BINARIES}${BINARY} "
fi fi