Coverity TAINTED_STRING - CID 12543 - src/main.cpp - function: main - Assigning: "programName" = "argv[0]". Both are now tainted. Assigning: "programArgv" = "argv". Both are now tainted. Later: Passing tainted string "programName" to "execvp(char const *, char * const *)", which cannot accept tainted data and passing tainted string "*programArgv" to "execvp(char const *, char * const *)", which cannot accept tainted data.

[Product Strategy Coverity Bug Uploader]

This bug is exported from the Coverity Integration Manager on Canonical's servers. For information on how this is done please see this website: https://wiki.ubuntu.com/CanonicalProductStrategy/Coverity
CID: 12543
Checker: TAINTED_STRING
Category: No category available
CWE definition: http://cwe.mitre.org/data/definitions/20.html
File: /tmp/buildd/compiz-0.9.9~daily13.01.14/src/main.cpp
Function: main
Code snippet:
248 main (int argc, char **argv)
249 {
250 CompManager manager;
251
CID 12543 - TAINTED_STRING
Assigning: "programName" = "argv[0]". Both are now tainted.
252 programName = argv[0];
253 programArgc = argc;
CID 12543 - TAINTED_STRING
Assigning: "programArgv" = "argv". Both are now tainted.
254 programArgv = argv;
255
256 detectCompizBinPath (argv);
257

[Product Strategy Coverity Bug Uploader (coverity-uploader)]

Source file with Coverity annotations.