zwoop opened a new issue, #10032:
URL: https://github.com/apache/trafficserver/issues/10032

   ```
   *** CID 1513212:    (TAINTED_SCALAR)
   /src/traffic_cache_tool/[CacheTool.cc](http://cachetool.cc/): 1341 in 
scan_span(ct::Span *, const swoc::_1_5_1::file::path &)()
   1335     
   1336         if (!regex_path.empty()) {
   1337           CacheScan cs(strp, regex_path);
   1338           cs.Scan(true);
   1339         } else {
   1340           CacheScan cs(strp);
      CID 1513212:    (TAINTED_SCALAR)
      Passing tainted expression "cs.stripe" to "Scan", which uses it as a loop 
boundary.
   1341           cs.Scan(false);
   1342         }
   1343       }
   1344     }
   1345     
   1346     void
   /src/traffic_cache_tool/[CacheTool.cc](http://cachetool.cc/): 1338 in 
scan_span(ct::Span *, const swoc::_1_5_1::file::path &)()
   1332       for (auto strp : span->_stripes) {
   1333         strp->loadMeta();
   1334         strp->loadDir();
   1335     
   1336         if (!regex_path.empty()) {
   1337           CacheScan cs(strp, regex_path);
      CID 1513212:    (TAINTED_SCALAR)
      Passing tainted expression "cs.stripe" to "Scan", which uses it as a loop 
boundary.
   1338           cs.Scan(true);
   1339         } else {
   1340           CacheScan cs(strp);
   1341           cs.Scan(false);
   1342         }
   1343       }
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to