
Taint mode (cont)
Whenever input comes from outside your program and will go to another program, it needs to be untainted.
$ perl -T
$text = <STDIN>;
system "echo $text";
<ctrl-d>
Insecure dependency in system while running with -T switch
Copyright 2003, Bri Hatch of Onsight, Inc.
Presented at SPUG, 2003.
Presentation created using vim and MagicPoint.