system-info-tool: Fix to use mkdir() instead of system("/usr/bin/mkdir") 39/317339/3 accepted/tizen_unified_x_asan accepted/tizen/unified/20250102.161027 accepted/tizen/unified/x/20250102.211255 accepted/tizen/unified/x/asan/20250113.002133
authorYoungjae Cho <y0.cho@samsung.com>
Mon, 30 Dec 2024 12:03:52 +0000 (21:03 +0900)
committerYoungjae Cho <y0.cho@samsung.com>
Tue, 31 Dec 2024 03:29:43 +0000 (12:29 +0900)
commit974a220a8c5373b22d3a55e6f6b5a8ed4ec14a7f
treef38046fa24484af46a9ff48daa89a3c076f60424
parent7f77fb200216f3997e98b64fb69de25c8764acb4
system-info-tool: Fix to use mkdir() instead of system("/usr/bin/mkdir")

In contrast to the older tizen version, the system-info-tool has changed
to be installed on the image by default. Therefore it becomes important
that the execution of shell command injection(CWE-77, CWE-78). To prevent
this, use mkdir() syscall instead.

Change-Id: Ibd60eb6461f457c125b4739ee8e263cb8dd5c4cb
Signed-off-by: Youngjae Cho <y0.cho@samsung.com>
tool/system-info-tool-set.c