Command Injection - array

sebhildebrandt · Feb 13, 2021 · 1e3b479 · 1e3b479
1 parent d000198
commit 1e3b479
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/lib/processes.js b/lib/processes.js
@@ -99,19 +99,26 @@ function services(srv, callback) {
 
   return new Promise((resolve) => {
     process.nextTick(() => {
+      if (typeof srv !== "string") {
+        if (callback) { callback([]); }
+        return resolve([]);
+      }
+
       if (srv) {
         let srvString = '';
         srvString.__proto__.toLowerCase = util.stringToLower;
         srvString.__proto__.replace = util.stringReplace;
         srvString.__proto__.trim = util.stringTrim;
 
         const s = util.sanitizeShellString(srv);
+        console.log(s)
         for (let i = 0; i <= 2000; i++) {
           if (!(s[i] === undefined)) {
             srvString = srvString + s[i];
           }
         }
 
+        console.log(srvString)
         srvString = srvString.trim().toLowerCase().replace(/, /g, '|').replace(/,+/g, '|');
         if (srvString === '') {
           srvString = '*';