Skip to content

Commit fb706e9

Browse files
committed
TerminalShell: use ffBinaryExtractStrings result as possible
1 parent f270255 commit fb706e9

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

src/detection/terminalshell/terminalshell.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -69,6 +69,7 @@ static bool getShellVersionBash(FFstrbuf* exe, FFstrbuf* exePath, FFstrbuf* vers
6969
if (*path == '\0')
7070
path = exe->chars;
7171
ffBinaryExtractStrings(path, extractBashVersion, version, (uint32_t) strlen("@(#)Bash version 0.0.0(0) release GNU"));
72+
if (version->length > 0) return true;
7273

7374
if(!getExeVersionRaw(exe, version))
7475
return false;

0 commit comments

Comments
 (0)