https://bugs.linaro.org/show_bug.cgi?id=2423
Bug ID: 2423
Summary: CID 164656: Insecure data handling shmem_linux.c
Product: OpenDataPlane - linux- generic reference
Version: v1.10.1
Hardware: Other
OS: Linux
Status: UNCONFIRMED
Severity: enhancement
Priority: ---
Component: General ODP
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
*** CID 164656: Insecure data handling (TAINTED_STRING)
/test/platform/linux-generic/shmem/shmem_linux.c: 113 in main()
107 /* start the ODP application: */
108 odp_app = fork();
109 if (odp_app < 0) /* error */
110 exit(1);
111
112 if (odp_app == 0) /* child */
>>> CID 164656: Insecure data handling (TAINTED_STRING)
>>> Passing tainted string "odp_name" to "execv", which cannot accept
>>> tainted data.
113 execv(odp_name, &odp_params);
114
115 /* wait max 30 sec for the fifo to be created by the ODP side.
116 * Just die if time expire as there is no fifo to communicate
117 * through... */
118 sprintf(fifo_name, FIFO_NAME_FMT, odp_app);
--
You are receiving this mail because:
You are the assignee for the bug.
