From ec80c6eacdaf8f5f59e36a1c11da180fa21c8551 Mon Sep 17 00:00:00 2001 From: dwheeler Date: Tue, 16 Jan 2007 23:10:13 +0000 Subject: [PATCH] Clean up getenv text git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@13 5c01084b-1f27-0410-9f85-80411afe95dc --- flawfinder | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/flawfinder b/flawfinder index 9fa7c89..75a9c38 100755 --- a/flawfinder +++ b/flawfinder @@ -1005,16 +1005,16 @@ c_ruleset = { "chroot": (normal, 3, "chroot can be very helpful, but is hard to use correctly", - "Make sure the program immediately chdir(\"/\"), closes file descriptors, " + - "and drops root privileges, and that all necessary files (and no more!) are " + - "in the new root", + "Make sure the program immediately chdir(\"/\")," + + " closes file descriptors," + + " and drops root privileges, and that all necessary files" + + " (and no more!) are in the new root", "misc", "", {}), "getenv|curl_getenv": - (normal, 3, "Environment variables are untrustable input if they can be" - "it returns untrustable input if the environment can be" + - "set by an attacker. It can have any content and length, " + - "and the same variable can be set more than once", + (normal, 3, "Environment variables are untrustable input if they can be" + + " set by an attacker. They can have any content and" + + " length, and the same variable can be set more than once", "Check environment variables carefully before using them", "buffer", "", {'input' : 1}),