Security aware programming(4)

• Taint mode: what it does:

  • values originating from outside the program are marked 'tainted'
    • command line arguments
    • environment variables
    • locale information
    • (some) system calls
    • all file input
  • expression with tainted values becomes tainted