From 5c16d068397fca35d26fc437e92b7f5d77ebef1d Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Tue, 28 Jul 2026 01:52:55 +0000
Subject: [PATCH] =?UTF-8?q?scripts:=20=F0=9F=9B=A1=EF=B8=8F=20Sentinel:=20?=
 =?UTF-8?q?[CRITICAL]=20Fix=20command=20injection=20in=20feeds=20update?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

Co-authored-by: manupawickramasinghe <73810867+manupawickramasinghe@users.noreply.github.com>
---
 scripts/feeds | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/feeds b/scripts/feeds
index f28a17796f1fb4..63cb9efc71172b 100755
--- a/scripts/feeds
+++ b/scripts/feeds
@@ -229,7 +229,7 @@ sub update_feed_via($$$$$$$$) {
 
 	if( $relocate || !$m->{'update'} || !-d "$localpath/$m->{'controldir'}" ) {
 		if (defined $flags->{'root'}) {
-			system("rm -rf $localpath_orig; ln -s $safename/$flags->{'root'} $localpath_orig");
+			system("rm -rf '$localpath_orig'; ln -s '$safename/$flags->{'root'}' '$localpath_orig'");
 		}
 		system("rm -rf '$localpath'");
 		if ($m->{'init_branch'} and $branch) {