[incubator-wayang] branch 2pk03-129 created (now 3e0fce85)

[al...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

aloalt pushed a change to branch 2pk03-129
in repository https://gitbox.apache.org/repos/asf/incubator-wayang.git


      at 3e0fce85 concat strings vulnerability  #129

This branch includes the following new commits:

     new 3e0fce85 concat strings vulnerability  #129

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

[incubator-wayang] 01/01: concat strings vulnerability #129

[al...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

aloalt pushed a commit to branch 2pk03-129
in repository https://gitbox.apache.org/repos/asf/incubator-wayang.git

commit 3e0fce852c968b0afd909859f19fb57b809c734f
Author: Alexander Alten <al...@apache.org>
AuthorDate: Fri Jun 16 15:20:09 2023 +0200

    concat strings vulnerability  #129
---
 wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java b/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
index 35d483cf..fe59312e 100644
--- a/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
+++ b/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
@@ -105,7 +105,9 @@ public class Grep implements Serializable {
     String output = args[2]+"/lala.out";
 
     String command = "rm -r "+output;
-    Process process = Runtime.getRuntime().exec(command);
+    Runtime rt = Runtime.getRuntime();
+    Process process = rt.exec(new String[] {
+                    (command)});
 
     long pre = System.currentTimeMillis();
     switch (platform){