From 45438fd3fd14a76491f633bf9d34bc239cabb876 Mon Sep 17 00:00:00 2001
From: Renato Botelho <garga@FreeBSD.org>
Date: Tue, 17 Jun 2014 09:40:06 -0300
Subject: Escape parameters passed to shell_exec()

---
 usr/local/pkg/openntpd.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'usr/local/pkg/openntpd.inc')

diff --git a/usr/local/pkg/openntpd.inc b/usr/local/pkg/openntpd.inc
index c4914b8..dcbb50a 100644
--- a/usr/local/pkg/openntpd.inc
+++ b/usr/local/pkg/openntpd.inc
@@ -21,7 +21,7 @@ EOD;
 
 function openntpd_get_iface_ip($iface) {
 	$iface = convert_friendly_interface_to_real_interface_name($iface);
-	$line = trim(shell_exec("ifconfig $iface | grep inet | grep -v inet6"));
+	$line = trim(shell_exec("ifconfig " . escapeshellarg($iface) . " | grep inet | grep -v inet6"));
 	list($dummy, $ip, $dummy2, $dummy3) = explode(' ', $line);
 
 	return $ip;
-- 
cgit v1.1