fixed parsing in HASH commands

handle_files.go

@@ -593,7 +593,12 @@ func (c *clientHandler) handleGenericHash(param string, algo HASHAlgo, isCustomM
 		return nil
 	}
 
-	args := strings.SplitN(param, " ", 3)
+	args, err := advSplitN(param, ' ', 3)
+
+	if err != nil || len(args) < 1 {
+		c.writeMessage(StatusSyntaxErrorParameters, fmt.Sprintf("invalid HASH parameters: %v", param))
+	}
+
 	info, err := c.driver.Stat(args[0])
 
 	if err != nil {

string_utils.go

@@ -0,0 +1,19 @@
+package ftpserver
+
+import (
+	"encoding/csv"
+	"strings"
+)
+
+func advSplitN(s string, sep rune, n int) ([]string, error) {
+	r := csv.NewReader(strings.NewReader(s))
+	r.Comma = sep
+	record, err := r.Read()
+	if err != nil {
+		return nil, err
+	}
+	if len(record) > n {
+		return record[:n], nil
+	}
+	return record, nil
+}