From 5026be2d28185efcf6c1ee81fafe2e7657eddeb4 Mon Sep 17 00:00:00 2001
From: Linus Dierheimer <Linus@Dierheimer.de>
Date: Thu, 29 Dec 2022 22:58:29 +0100
Subject: [PATCH] Fix parsing mountpoints with backslashes #364

---
 src/detection/disk/disk_linux.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/detection/disk/disk_linux.c b/src/detection/disk/disk_linux.c
index da6c02d50..a4a476009 100644
--- a/src/detection/disk/disk_linux.c
+++ b/src/detection/disk/disk_linux.c
@@ -7,6 +7,14 @@ static void strbufAppendMountPoint(FFstrbuf* mountpoint, const char* source)
 {
     while(*source != '\0' && !isspace(*source))
     {
+        //Backslash is encoded as \134
+        if(strncmp(source, "\\134", 4) == 0)
+        {
+            ffStrbufAppendC(mountpoint, '\\');
+            source += 4;
+            continue;
+        }
+
         //Space is encoded as \040
         if(strncmp(source, "\\040", 4) == 0)
         {