Check full path of hidden node if dir doesn't end with /

dmknght · Oct 27, 2024 · 6bb3d81 · 6bb3d81
1 parent 9901e81
commit 6bb3d81
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/engine/scan_file.nim b/src/engine/scan_file.nim
@@ -137,8 +137,9 @@ proc fscanner_scan_file*(scan_ctx: var FileScanCtx, scan_path: string, virname:
 ]#
 proc fscanner_check_hidden_node(scan_ctx: var FileScanCtx, ptr_dir: ptr Dirent, scan_dir, current_node_name: string, next_node_name: var string) =
   if not isEmptyOrWhiteSpace(next_node_name) and next_node_name != current_node_name:
+    let full_node_path = if scan_dir.endsWith("/"): scan_dir & current_node_name else: scan_dir & "/" & current_node_name
     scan_ctx.file_infected += 1
-    print_file_infected("Heur:Rootkit.HiddenOnDisk", scan_dir & next_node_name)
+    print_file_infected("Heur:Rootkit.HiddenOnDisk", full_node_path)
 
   # Get name of the next node
   if ptr_dir.d_reclen >= 256: