fix: Improve argument handling in QProcess commands

- Updated the command execution in DeviceInfo to use QStringList for better argument handling.
- Enhanced the condition checks in HttpDriverInterface for OS build string length.
- Refactored the rules file path construction in ControlInterface to use sanitized VID and PID.

Log: Refactor command execution and improve string handling across multiple files.

Author: dengzhongyuan365-dev

deepin-devicemanager-server/deepin-devicecontrol/src/controlinterface.cpp

@@ -222,7 +222,7 @@ bool ControlInterface::enableKeyboard(const QString& vid, const QString& pid, co
         return false;
     }
 
-    QString rulesFile = QString(UDEV_RULES_PATH_LOCAL "/99-keyboard-device-control-%1-%2.rules").arg(vid).arg(pid);
+    QString rulesFile = QString(UDEV_RULES_PATH_LOCAL "/99-keyboard-device-control-%1-%2.rules").arg(safeVid).arg(safePid);
 
     QString ruleContent;
     if (enable_device) {

deepin-devicemanager-server/deepin-devicecontrol/src/enablecontrol/enablesqlmanager.cpp

@@ -153,7 +153,7 @@ bool EnableSqlManager::uniqueIDExistedEX(const QString &key, const QString path)
 bool EnableSqlManager::isUniqueIdEnabled(const QString &key)
 {
     qCDebug(appLog) << "Checking if unique ID is enabled:" << key;
-    QString sql = QString("SELECT enable FROM %1 WHERE unique_id='%2';").arg(DB_TABLE_AUTHORIZED).arg(":key");
+    QString sql = QString("SELECT enable FROM %1 WHERE unique_id=:key;").arg(DB_TABLE_AUTHORIZED);
     if(!m_sqlQuery.prepare(sql)) return false;
     m_sqlQuery.bindValue(":key", QVariant(key));
     if (m_sqlQuery.exec() && m_sqlQuery.next()) {

deepin-devicemanager/src/DeviceManager/DeviceInfo.cpp

@@ -791,7 +791,7 @@ void DeviceBaseInfo::setVendorNameBylsusbLspci(const QString &vidpid, const QStr
         QProcess process;
         QString vendorId = vidpid.toLower().remove("0x").trimmed().left(4);
         QString deviceId = vidpid.toLower().remove("0x").trimmed().right(4);
-        process.start("lsusb -v -d " + vendorId + ":" + deviceId);
+        process.start("lsusb", QStringList() << "-v" << "-d" << QString("%1:%2").arg(vendorId, deviceId));
         process.waitForFinished(-1);
 
         QString output = process.readAllStandardOutput();

deepin-devicemanager/src/DriverControl/HttpDriverInterface.cpp

@@ -115,7 +115,7 @@ QString HttpDriverInterface::getRequestBoard(QString strManufacturer, QString st
         if (!build.isEmpty()) {
             qCDebug(appLog) << "OS build is not empty, adding to URL";
             QString system = build;
-            if (build[1] == "1") //专业版通过【产品线类型-产品线版本】方式进行系统构建匹配
+            if (build.length() > 3 && build[1] == '1') //专业版通过【产品线类型-产品线版本】方式进行系统构建匹配
                 system = QString("%1-%2").arg(build[1]).arg(build[3]);
             strUrl += "&system=" + system;
         }
@@ -127,7 +127,7 @@ QString HttpDriverInterface::getRequestBoard(QString strManufacturer, QString st
             qCDebug(appLog) << "OS build is not empty, adding to URL";
             QString system = build;
 
-            if (build[1] == "1") //专业版通过【产品线类型-产品线版本】方式进行系统构建匹配
+            if (build.length() > 3 && build[1] == '1') //专业版通过【产品线类型-产品线版本】方式进行系统构建匹配
                 system = QString("%1-%2").arg(build[1]).arg(build[3]);
 
             strUrl += "&system=" + system;