You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wayang.apache.org by gl...@apache.org on 2023/06/25 11:35:54 UTC
[incubator-wayang] 02/06: concat strings vulnerability #129
This is an automated email from the ASF dual-hosted git repository.
glauesppen pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-wayang.git
commit c66cd3ce1da3210fca737649f372c403df405a19
Author: Alexander Alten <al...@apache.org>
AuthorDate: Fri Jun 16 15:20:09 2023 +0200
concat strings vulnerability #129
---
wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java b/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
index 35d483cf..fe59312e 100644
--- a/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
+++ b/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
@@ -105,7 +105,9 @@ public class Grep implements Serializable {
String output = args[2]+"/lala.out";
String command = "rm -r "+output;
- Process process = Runtime.getRuntime().exec(command);
+ Runtime rt = Runtime.getRuntime();
+ Process process = rt.exec(new String[] {
+ (command)});
long pre = System.currentTimeMillis();
switch (platform){