Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Apr 2026 23:34:41 +0000
From:      bugzilla-noreply@freebsd.org
To:        doc@FreeBSD.org
Subject:   [Bug 294497] Two typos in the SECURITY CONSIDERATION section of the system function in libc
Message-ID:  <bug-294497-9@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294497

            Bug ID: 294497
           Summary: Two typos in the SECURITY CONSIDERATION section of the
                    system function in libc
           Product: Documentation
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Manual Pages
          Assignee: bugs@FreeBSD.org
          Reporter: ulrichulrich_se@yahoo.com
                CC: doc@FreeBSD.org

int system(const char *string)

The system() function is easily misused in a manner that enables a malicious
user to run arbitrary command, because all meta-characters supported by sh(1)
would be honored.  User supplied parameters should always be carefully santized
before they appear in string.

two typos

to run arbitrary commands

OR

to run an arbitrary command


santized
=>
sanitized

-- 
You are receiving this mail because:
You are on the CC list for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-294497-9>