taint.c-explain.html from CQual at Krugle
Show taint.c-explain.html syntax highlighted
<html>
<body bgcolor="white">
<h2>Tainting: Small Example</h2>
<p>
The lower left pane contains the original program, and the lower right
pane contains the program with qualifier annotations.
<p>
In this example, the call to <tt>getenv</tt> returns the value of
environment variable <tt>LD_LIBRARY_PATH</tt>, which may be controlled
by a malicious adversary. The result of <tt>getenv</tt> is stored
first in <tt>s</tt>, then in <tt>t</tt>, and then is subsequently
passed as a format-string argument to <tt>printf</tt>. Thus this
program has a potential format-string vulnerability.
</body>
</html>
See more files for this project here