Only explode registry key if it can be tokenized

osquery · Jun 1, 2020 · cb2b9b1 · cb2b9b1
1 parent c34bdf6
commit cb2b9b1
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/osquery/tables/system/windows/registry.cpp b/osquery/tables/system/windows/registry.cpp
@@ -227,9 +227,11 @@ inline void explodeRegistryPath(const std::string& path,
                                 std::string& rHive,
                                 std::string& rKey) {
   auto toks = osquery::split(path, kRegSep);
-  rHive = toks.front();
-  toks.erase(toks.begin());
-  rKey = osquery::join(toks, kRegSep);
+  if (toks.size()) {
+    rHive = toks.front();
+    toks.erase(toks.begin());
+    rKey = osquery::join(toks, kRegSep);
+  }
 }
 
 /// Microsoft helper function for getting the contents of a registry key