From 2a84e34fb0feff085dcf43eae5de1bf6f8d35d53 Mon Sep 17 00:00:00 2001
From: cbdev <cb@cbcdn.com>
Date: Sun, 9 Jul 2023 13:57:01 +0200
Subject: Sanitize tag data, pass dynamic data to commands

---
 command.c | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

(limited to 'command.c')

diff --git a/command.c b/command.c
index 3dc07e6..869c0a6 100644
--- a/command.c
+++ b/command.c
@@ -153,12 +153,12 @@ void command_reap(){
 	} while(status);
 }
 
-static int command_spawn(command_t* cmd, char* command_name, char* command_static, size_t arg_length){
+static int command_spawn(command_t* cmd, char* command_name, char* command_static){
 	char* workdir = config_get("command", "chdir");
 	char* handler = config_get("command", "handler");
+	char tag_uid[12] = "", dynsize[10] = "";
 	size_t bytes;
-	char tag_uid[12] = "";
-	char dynsize[10] = "";
+	char* dynamic = (cmd->tag->dynamic_length) ? calloc(cmd->tag->dynamic_length + 1, sizeof(uint8_t)) : NULL;
 
 	printf("Starting command %s, static %s\n", command_name, command_static);
 	if(pipe(cmd->iopipe)){
@@ -203,12 +203,16 @@ static int command_spawn(command_t* cmd, char* command_name, char* command_stati
 			setenv("TAG_UID", tag_uid, 1);
 			setenv("MAX_DATA_LENGTH", dynsize, 1);
 
+			if(dynamic){
+				memcpy(dynamic, cmd->tag->dynamic_data, cmd->tag->dynamic_length);
+			}
+
 			//run actual command
 			if(handler){
-				execl(handler, handler, command_name, command_static, NULL);
+				execl(handler, handler, command_name, command_static, dynamic, NULL);
 			}
 			else{
-				execl(command_name, command_name, command_static, NULL);
+				execl(command_name, command_name, command_static, dynamic, NULL);
 			}
 			perror("child/exec");
 			_exit(1);
@@ -223,7 +227,7 @@ static int command_spawn(command_t* cmd, char* command_name, char* command_stati
 }
 
 int command_start(nfc_tag_info_t* info){
-	size_t n = 0, p = ncommands, arg_length = 0;
+	size_t n = 0, p = ncommands;
 	uint8_t* command_name = NULL, *command_static = NULL;
 
 	for(n = 0; n < ncommands; n++){
@@ -257,7 +261,6 @@ int command_start(nfc_tag_info_t* info){
 			command_name[n] = 0;
 			if(info->static_length - n > 1){
 				command_static = command_name + n + 1;
-				arg_length = info->static_length - n - 1;
 			}
 			break;
 		}
@@ -268,7 +271,6 @@ int command_start(nfc_tag_info_t* info){
 		free(command_name);
 		return 1;
 	}
-	//FIXME might want to parse out any non-graphs
 
 	if(p == ncommands){
 		commands = realloc(commands, (p + 1) * sizeof(command_t));
@@ -284,7 +286,7 @@ int command_start(nfc_tag_info_t* info){
 
 	commands[p].tag = info;
 	commands[p].input_head = 0;
-	if(command_spawn(commands + p, (char*) command_name, (char*) command_static, arg_length)){
+	if(command_spawn(commands + p, (char*) command_name, (char*) command_static)){
 		//TODO clean up and free command instance
 	}
 
-- 
cgit v1.2.3