feat: add execvP to the list of bad functions

This commit is contained in:
raptor
2026-01-16 11:03:08 +01:00
committed by GitHub
parent 009fac15e1
commit b47ead4122
+1 -1
View File
@@ -133,7 +133,7 @@ public class Rhabdomancer extends GhidraScript
// exec* and related functions can be used insecurely
// functions without "-e" suffix take the environment from the extern variable environ of calling process
"execl", "execlp", "execle", "execv", "execve", "execvp", "execvpe",
"_execl", "_execlp", "_execle", "_execv", "_execve", "_execvp", "_execvpe",
"_execl", "_execlp", "_execle", "_execv", "_execve", "_execvp", "_execvpe", "execvP",
"fork", "vfork", "clone", "pipe",
// i/o functions can be used insecurely
"open", "open64", "openat", "openat64", "fopen", "fopen64", "freopen", "freopen64", "dlopen", "connect",