david-a-wheeler / flawfinder

a static analysis tool for finding vulnerabilities in C/C++ source code

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

False positive when a variable is named "system"

thesp0nge opened this issue · comments

This piece of code is flagged to be vulnerable as a shell execution because of the declaration of a variable named system...

for (n = 0; lines != NULL && lines[n] != NULL; n++)
    {
      const gchar *line = lines[n];
      guint64 user;
      guint64 nice;
      guint64 system;