From b47ead4122abedb12fc05fa87f127b8633f77460 Mon Sep 17 00:00:00 2001 From: raptor Date: Fri, 16 Jan 2026 11:03:08 +0100 Subject: [PATCH] feat: add `execvP` to the list of bad functions --- Rhabdomancer.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Rhabdomancer.java b/Rhabdomancer.java index eeedee9..e2d79bb 100644 --- a/Rhabdomancer.java +++ b/Rhabdomancer.java @@ -133,7 +133,7 @@ public class Rhabdomancer extends GhidraScript // exec* and related functions can be used insecurely // functions without "-e" suffix take the environment from the extern variable environ of calling process "execl", "execlp", "execle", "execv", "execve", "execvp", "execvpe", - "_execl", "_execlp", "_execle", "_execv", "_execve", "_execvp", "_execvpe", + "_execl", "_execlp", "_execle", "_execv", "_execve", "_execvp", "_execvpe", "execvP", "fork", "vfork", "clone", "pipe", // i/o functions can be used insecurely "open", "open64", "openat", "openat64", "fopen", "fopen64", "freopen", "freopen64", "dlopen", "connect",