From ddd3cd242128176ed1694634b1e13c254d238637 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Georges=20Dup=C3=A9ron?= Date: Sat, 31 Mar 2012 21:28:58 +0200 Subject: [PATCH] Fixed a security issue : mv arguments weren't preceded by a -- . --- updatehash.sql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/updatehash.sql b/updatehash.sql index 2a226ea..fb63a6f 100644 --- a/updatehash.sql +++ b/updatehash.sql @@ -22,4 +22,4 @@ select (select path from files where rowid == hashesother.id),(select (select pa # Rename (prepend ".% to file name) files not in folder A which have a duplicate in folder A. [ -e hashes.db ] && sqlite3 hashes.db "select (select path from files where rowid == hashesother.id) from hashesother where hashesother.hash in (select hash from hashesA);" > dup.lst -pv -l dup.lst | while read ab; do file="${ab##*/}"; dir="${ab%/*}"; dest="${dir}/.%${file}"; if [ -e "$ab" ]; then [ "$file" != "${file#.%}" ] || [ -e "$dest" ] || mv -i "$ab" "$dest"; fi; done +pv -l dup.lst | while read ab; do file="${ab##*/}"; dir="${ab%/*}"; dest="${dir}/.%${file}"; if [ -e "$ab" ]; then [ "$file" != "${file#.%}" ] || [ -e "$dest" ] || mv -i -- "$ab" "$dest"; fi; done