The work_dir safety guard in umount() was placed only around the trailing rmdir calls, leaving earlier uses of work_dir — chdir(), strlen(), and multiple execute_cmd() calls (which invoke system()) — completely unprotected against NULL or shell-injectable input.

Changes

• Early-return guard: Moved the NULL, empty-string, and space-character validation to the top of umount() before any use of work_dir
• Removed redundant guards: Dropped the inner strlen check and the late if block around rmdir; the single upfront check now covers the entire function body

void umount(char *work_dir)
{
    if (work_dir == NULL || strlen(work_dir) == 0 || strchr(work_dir, ' ') != NULL) return;
    if(chdir(work_dir)) exit(-1);
    execute_cmd("/bin/umount -l %s/usr 2>/dev/null", work_dir);
    // ... all subsequent uses of work_dir are now guarded
}

⚡ Quickly spin up Copilot coding agent tasks from anywhere on your macOS or Windows machine with Raycast.