I think software should not execute user code when setuid() or setgid() failed. Checks for setenv() and execl() would be good too.
setuid()
setgid()
setenv()
execl()
e4rat-collect: fix compiler warning setuid/setgid
Log in to post a comment.