From a9e6f0773219d40a089ce7dde86900d4e7a9a937 Mon Sep 17 00:00:00 2001 From: Jack Nagel Date: Fri, 24 Feb 2012 17:23:20 -0600 Subject: [PATCH] Formula#system: sanitize args before exec This prevents passing nested arrays to exec; the same thing is done in safe_system. Fixes Homebrew/homebrew#10295. Signed-off-by: Jack Nagel --- Library/Homebrew/formula.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/Library/Homebrew/formula.rb b/Library/Homebrew/formula.rb index 453c1082f8..2ba8f57622 100644 --- a/Library/Homebrew/formula.rb +++ b/Library/Homebrew/formula.rb @@ -448,6 +448,7 @@ protected rd.close $stdout.reopen wr $stderr.reopen wr + args.collect!{|arg| arg.to_s} exec(cmd, *args) rescue nil exit! 1 # never gets here unless exec threw or failed end