From 55178554c24e9d88a5058bee2ff711d2f291ca53 Mon Sep 17 00:00:00 2001
From: Jo-Philipp Wich <jow@openwrt.org>
Date: Mon, 15 Jul 2013 13:42:58 +0000
Subject: [PATCH] base-files: reject invalid uci keys in network_get_device()
 and related procedures (#13886)

SVN-Revision: 37345
---
 package/base-files/files/lib/functions/network.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/package/base-files/files/lib/functions/network.sh b/package/base-files/files/lib/functions/network.sh
index 5ffe2ca0b9..ead69aa626 100644
--- a/package/base-files/files/lib/functions/network.sh
+++ b/package/base-files/files/lib/functions/network.sh
@@ -25,6 +25,10 @@ __network_parse_ifstatus()
 	local __list
 	local __old_ns
 
+	case "$__iface" in
+		*[^a-zA-Z0-9_]*) return 1 ;;
+	esac
+
 	__network_export __tmp "${__key}__parsed" && return 0
 	__tmp="$(ubus call network.interface."$__iface" status 2>/dev/null)"
 	[ -n "$__tmp" ] || return 1
-- 
2.25.1