CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnvp BadSink : execute command with wspawnvp Flow Variant: 33 Data flow: use of a C++ reference to data within the same function

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 84 Data flow: data passed to class constructor and destructor by declaring the class object on the heap and deleting it after use

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 83 Data flow: data passed to class constructor and destructor by declaring the class object on the stack

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string BadSink : execute command with wspawnv Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 74 Data flow: data passed in a map from one function to another in different source files

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 73 Data flow: data passed in a list from one function to another in different source files

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 72 Data flow: data passed in a vector from one function to another in different source files

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 62 Data flow: data flows using a C++ reference from one function to another in different source files

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 43 Data flow: data flows using a C++ reference from one function to another in the same source file

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnv BadSink : execute command with wspawnv Flow Variant: 33 Data flow: use of a C++ reference to data within the same function

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 84 Data flow: data passed to class constructor and destructor by declaring the class object on the heap and deleting it after use

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 83 Data flow: data passed to class constructor and destructor by declaring the class object on the stack

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string BadSink : execute command with wspawnlp Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 74 Data flow: data passed in a map from one function to another in different source files

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 73 Data flow: data passed in a list from one function to another in different source files

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 72 Data flow: data passed in a vector from one function to another in different source files

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 62 Data flow: data flows using a C++ reference from one function to another in different source files

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 43 Data flow: data flows using a C++ reference from one function to another in the same source file

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_spawnlp BadSink : execute command with wspawnlp Flow Variant: 33 Data flow: use of a C++ reference to data within the same function

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_execvp BadSink : execute command with wexecvp Flow Variant: 84 Data flow: data passed to class constructor and destructor by declaring the class object on the heap and deleting it after use

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_execvp BadSink : execute command with wexecvp Flow Variant: 83 Data flow: data passed to class constructor and destructor by declaring the class object on the stack

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string BadSink : execute command with wexecvp Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer

CWE: 78 OS Command Injection BadSource: file Read input from a file GoodSource: Fixed string Sinks: w32_execvp BadSink : execute command with wexecvp Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference