From 48a6f785e551967611ca49f40c05d1a567dd628e Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Tue, 18 Feb 2014 16:09:29 -0500
Subject: Use escapeshellarg for tinc here.

---
 config/tinc/tinc.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'config/tinc/tinc.inc')

diff --git a/config/tinc/tinc.inc b/config/tinc/tinc.inc
index 3280c414..bf4101d7 100644
--- a/config/tinc/tinc.inc
+++ b/config/tinc/tinc.inc
@@ -170,7 +170,7 @@ function tinc_deinstall() {
                 {
                         $realif = get_real_interface($ifs);
                         if ($realif)
-                                mwexec("/sbin/ifconfig  {$realif} -group " . $a_ifgroups[$_GET['id']]['ifname']);
+                                mwexec("/sbin/ifconfig  {$realif} -group " . escapeshellarg($a_ifgroups[$_GET['id']]['ifname']));
                 }
                 unset($a_ifgroups[$myid]);
         	mwexec("/bin/rm -f /tmp/config.cache");
-- 
cgit v1.2.3