This is an automated email from the ASF dual-hosted git repository.

aloalt pushed a commit to branch 2pk03-129
in repository https://gitbox.apache.org/repos/asf/incubator-wayang.git

commit 3e0fce852c968b0afd909859f19fb57b809c734f
Author: Alexander Alten <[email protected]>
AuthorDate: Fri Jun 16 15:20:09 2023 +0200

    concat strings vulnerability  #129
---
 wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git 
a/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java 
b/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
index 35d483cf..fe59312e 100644
--- a/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
+++ b/wayang-benchmark/code/main/java/org/apache/wayang/apps/grep/Grep.java
@@ -105,7 +105,9 @@ public class Grep implements Serializable {
     String output = args[2]+"/lala.out";
 
     String command = "rm -r "+output;
-    Process process = Runtime.getRuntime().exec(command);
+    Runtime rt = Runtime.getRuntime();
+    Process process = rt.exec(new String[] {
+                    (command)});
 
     long pre = System.currentTimeMillis();
     switch (platform){

Reply via email to