From 02d5f9477be31d2ca27d4e9f4d2d19f964c40c7c Mon Sep 17 00:00:00 2001
From: Jan-Tarek Butt <tarek@ring0.de>
Date: Fri, 14 Oct 2016 20:32:22 +0200
Subject: [PATCH] busybox: prevent globbing, word splitting

Double quote to prevent globbing and word splitting.

Signed-off-by: Jan-Tarek Butt <tarek@ring0.de>
---
 package/utils/busybox/files/cron | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/utils/busybox/files/cron b/package/utils/busybox/files/cron
index 19ecc43173..a201374276 100755
--- a/package/utils/busybox/files/cron
+++ b/package/utils/busybox/files/cron
@@ -14,7 +14,7 @@ validate_cron_section() {
 start_service () {
 	[ -z "$(ls /etc/crontabs/)" ] && return 1
 
-	loglevel=$(uci_get "system.@system[0].cronloglevel")
+	loglevel="$(uci_get "system.@system[0].cronloglevel")"
 
 	[ -z "${loglevel}" ] || {
 		/sbin/validate_data uinteger "${loglevel}" 2>/dev/null
@@ -28,7 +28,7 @@ start_service () {
 	ln -s /etc/crontabs /var/spool/cron/ 2>/dev/null
 
 	procd_open_instance
-	procd_set_param command "$PROG" -f -c /etc/crontabs -l ${loglevel:-5}
+	procd_set_param command "$PROG" -f -c /etc/crontabs -l "${loglevel:-5}"
 	procd_close_instance
 }
 
-- 
GitLab