Hi `SELECT FROM startup items ` seems to get the split of ex

Question

Hi `SELECT FROM startup items ` seems to get the split of executable path args wrong see it has split at the first space in Program Files and is listing path and binary in arguments this is incorrect

Mystery Incorporated · Answer

Added image with the table headings for reference

Martavis Parker · Answer

Thanks for reporting this Does it seem to split incorrectly consistently or only for some

Mystery Incorporated · Answer

< Martavis Parker> it doesn t like the space in Program Files so it is incorrectly splitting the string based on that space it should not do that

Mystery Incorporated · Answer

I don t have any paths with a space outside of Program Files in startup to test but as a dev to me logic would suggest that any path with a space in it will do the same thing

Martavis Parker · Answer

That makes complete sense I ll file an issue for it on our end Thanks

zwass · Answer

I investigated this and it seems it may be an osquery bug <https github com fleetdm fleet issues 1657>