Limit Call-outs to Valid Values

Secure Programming for Linux and Unix HOWTO
Prev | Chapter 8. Carefully Call Out to Other Resources | Next

# 8.2. Limit Call-outs to Valid Values

Ensure that any call out to another program only permits valid and expected values for every parameter. This is more difficult than it sounds, because many library calls or commands call lower-level routines in potentially surprising ways. For example, many system calls are implemented indirectly by calling the shell, which means that passing characters which are shell metacharacters can have dangerous effects. So, let's discuss metacharacters.

Prev | Home | Next
Call Only Safe Library Routines | Up | Handle Metacharacters