From bfd46d8da46cce9fe2db013c80e41c0d0d528985 Mon Sep 17 00:00:00 2001
From: Patrick Wardle <patrick@objective-see.com>
Date: Sat, 11 Apr 2020 13:28:52 -1000
Subject: [PATCH] improved parsing of launch item plists

---
 Daemon/Daemon/Plugins/Launchd.m | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/Daemon/Daemon/Plugins/Launchd.m b/Daemon/Daemon/Plugins/Launchd.m
index 08f3e57..035ffb9 100644
--- a/Daemon/Daemon/Plugins/Launchd.m
+++ b/Daemon/Daemon/Plugins/Launchd.m
@@ -88,11 +88,18 @@
         itemBinary = getValueFromPlist(event.file.destinationPath, @"Program", YES, 1.0f);
     }
     
+    //sanity check
+    if(nil == itemBinary)
+    {
+        //bail
+        goto bail;
+    }
+    
     //sanity check
     if(YES != [itemBinary isKindOfClass:[NSString class]])
     {
         //err msg
-        logMsg(LOG_ERR, [NSString stringWithFormat:@"launch item binary path, %@, is not a string", itemBinary]);
+        logMsg(LOG_ERR, [NSString stringWithFormat:@"launch item's binary path, %@, is not a string (but: %@)", itemBinary, itemBinary.className]);
         
         //unset
         itemBinary = nil;