Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/schroot-1.6.10/bin/csbuild/csbuild-debian-changes.cc Examining data/schroot-1.6.10/bin/csbuild/csbuild-debian-changes.h Examining data/schroot-1.6.10/bin/csbuild/csbuild-main.cc Examining data/schroot-1.6.10/bin/csbuild/csbuild-main.h Examining data/schroot-1.6.10/bin/csbuild/csbuild-options.cc Examining data/schroot-1.6.10/bin/csbuild/csbuild-options.h Examining data/schroot-1.6.10/bin/csbuild/csbuild.cc Examining data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-main.cc Examining data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-main.h Examining data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-options.cc Examining data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-options.h Examining data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-session.cc Examining data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-session.h Examining data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa.cc Examining data/schroot-1.6.10/bin/dchroot/dchroot-main-base.cc Examining data/schroot-1.6.10/bin/dchroot/dchroot-main-base.h Examining data/schroot-1.6.10/bin/dchroot/dchroot-main.cc Examining data/schroot-1.6.10/bin/dchroot/dchroot-main.h Examining data/schroot-1.6.10/bin/dchroot/dchroot-options.cc Examining data/schroot-1.6.10/bin/dchroot/dchroot-options.h Examining data/schroot-1.6.10/bin/dchroot/dchroot-session-base.cc Examining data/schroot-1.6.10/bin/dchroot/dchroot-session-base.h Examining data/schroot-1.6.10/bin/dchroot/dchroot-session.cc Examining data/schroot-1.6.10/bin/dchroot/dchroot-session.h Examining data/schroot-1.6.10/bin/dchroot/dchroot.cc Examining data/schroot-1.6.10/bin/schroot-base/schroot-base-main.cc Examining data/schroot-1.6.10/bin/schroot-base/schroot-base-main.h Examining data/schroot-1.6.10/bin/schroot-base/schroot-base-option-action.cc Examining data/schroot-1.6.10/bin/schroot-base/schroot-base-option-action.h Examining data/schroot-1.6.10/bin/schroot-base/schroot-base-options.cc Examining data/schroot-1.6.10/bin/schroot-base/schroot-base-options.h Examining data/schroot-1.6.10/bin/schroot-base/schroot-base-run.h Examining data/schroot-1.6.10/bin/schroot-listmounts/schroot-listmounts-main.cc Examining data/schroot-1.6.10/bin/schroot-listmounts/schroot-listmounts-main.h Examining data/schroot-1.6.10/bin/schroot-listmounts/schroot-listmounts-options.cc Examining data/schroot-1.6.10/bin/schroot-listmounts/schroot-listmounts-options.h Examining data/schroot-1.6.10/bin/schroot-listmounts/schroot-listmounts.cc Examining data/schroot-1.6.10/bin/schroot-mount/schroot-mount-options.cc Examining data/schroot-1.6.10/bin/schroot-mount/schroot-mount-options.h Examining data/schroot-1.6.10/bin/schroot-mount/schroot-mount.cc Examining data/schroot-1.6.10/bin/schroot-mount/schroot-mount-main.cc Examining data/schroot-1.6.10/bin/schroot-mount/schroot-mount-main.h Examining data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-main.cc Examining data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-main.h Examining data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-session.cc Examining data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-session.h Examining data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild.cc Examining data/schroot-1.6.10/bin/schroot/schroot-main-base.cc Examining data/schroot-1.6.10/bin/schroot/schroot-main-base.h Examining data/schroot-1.6.10/bin/schroot/schroot-main.cc Examining data/schroot-1.6.10/bin/schroot/schroot-main.h Examining data/schroot-1.6.10/bin/schroot/schroot-options-base.cc Examining data/schroot-1.6.10/bin/schroot/schroot-options-base.h Examining data/schroot-1.6.10/bin/schroot/schroot-options.cc Examining data/schroot-1.6.10/bin/schroot/schroot-options.h Examining data/schroot-1.6.10/bin/schroot/schroot.cc Examining data/schroot-1.6.10/doc/historical/sbuild-chroot-helper.c Examining data/schroot-1.6.10/sbuild/sbuild-auth-null.cc Examining data/schroot-1.6.10/sbuild/sbuild-auth-null.h Examining data/schroot-1.6.10/sbuild/sbuild-auth-pam-conv-tty.cc Examining data/schroot-1.6.10/sbuild/sbuild-auth-pam-conv-tty.h Examining data/schroot-1.6.10/sbuild/sbuild-auth-pam-conv.cc Examining data/schroot-1.6.10/sbuild/sbuild-auth-pam-conv.h Examining data/schroot-1.6.10/sbuild/sbuild-auth-pam-message.cc Examining data/schroot-1.6.10/sbuild/sbuild-auth-pam-message.h Examining data/schroot-1.6.10/sbuild/sbuild-auth-pam.cc Examining data/schroot-1.6.10/sbuild/sbuild-auth-pam.h Examining data/schroot-1.6.10/sbuild/sbuild-auth.cc Examining data/schroot-1.6.10/sbuild/sbuild-auth.h Examining data/schroot-1.6.10/sbuild/sbuild-basic-keyfile.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-config.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-file.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-plain.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-plain.h Examining data/schroot-1.6.10/sbuild/sbuild-ctty.cc Examining data/schroot-1.6.10/sbuild/sbuild-ctty.h Examining data/schroot-1.6.10/sbuild/sbuild-custom-error.h Examining data/schroot-1.6.10/sbuild/sbuild-environment.cc Examining data/schroot-1.6.10/sbuild/sbuild-environment.h Examining data/schroot-1.6.10/sbuild/sbuild-error.h Examining data/schroot-1.6.10/sbuild/sbuild-fdstream.h Examining data/schroot-1.6.10/sbuild/sbuild-feature.cc Examining data/schroot-1.6.10/sbuild/sbuild-feature.h Examining data/schroot-1.6.10/sbuild/sbuild-format-detail.cc Examining data/schroot-1.6.10/sbuild/sbuild-format-detail.h Examining data/schroot-1.6.10/sbuild/sbuild-i18n.h Examining data/schroot-1.6.10/sbuild/sbuild-keyfile-base.cc Examining data/schroot-1.6.10/sbuild/sbuild-keyfile-base.h Examining data/schroot-1.6.10/sbuild/sbuild-keyfile.h Examining data/schroot-1.6.10/sbuild/sbuild-lock.cc Examining data/schroot-1.6.10/sbuild/sbuild-lock.h Examining data/schroot-1.6.10/sbuild/sbuild-log.cc Examining data/schroot-1.6.10/sbuild/sbuild-log.h Examining data/schroot-1.6.10/sbuild/sbuild-mntstream.cc Examining data/schroot-1.6.10/sbuild/sbuild-mntstream.h Examining data/schroot-1.6.10/sbuild/sbuild-nostream.cc Examining data/schroot-1.6.10/sbuild/sbuild-nostream.h Examining data/schroot-1.6.10/sbuild/sbuild-null.cc Examining data/schroot-1.6.10/sbuild/sbuild-null.h Examining data/schroot-1.6.10/sbuild/sbuild-parse-error.h Examining data/schroot-1.6.10/sbuild/sbuild-parse-value.cc Examining data/schroot-1.6.10/sbuild/sbuild-parse-value.h Examining data/schroot-1.6.10/sbuild/sbuild-personality.cc Examining data/schroot-1.6.10/sbuild/sbuild-personality.h Examining data/schroot-1.6.10/sbuild/sbuild-regex.h Examining data/schroot-1.6.10/sbuild/sbuild-run-parts.cc Examining data/schroot-1.6.10/sbuild/sbuild-run-parts.h Examining data/schroot-1.6.10/sbuild/sbuild-session.cc Examining data/schroot-1.6.10/sbuild/sbuild-session.h Examining data/schroot-1.6.10/sbuild/sbuild-types.cc Examining data/schroot-1.6.10/sbuild/sbuild-types.h Examining data/schroot-1.6.10/sbuild/sbuild-util.cc Examining data/schroot-1.6.10/sbuild/sbuild-util.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot.h Examining data/schroot-1.6.10/sbuild/sbuild-tr1types.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h Examining data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc Examining data/schroot-1.6.10/sbuild/sbuild-chroot.cc Examining data/schroot-1.6.10/test/sbuild-chroot-config.cc Examining data/schroot-1.6.10/test/sbuild-chroot-facet-userdata.cc Examining data/schroot-1.6.10/test/sbuild-chroot.cc Examining data/schroot-1.6.10/test/sbuild-environment.cc Examining data/schroot-1.6.10/test/sbuild-lock.cc Examining data/schroot-1.6.10/test/sbuild-log.cc Examining data/schroot-1.6.10/test/sbuild-nostream.cc Examining data/schroot-1.6.10/test/sbuild-parse-value.cc Examining data/schroot-1.6.10/test/sbuild-personality.cc Examining data/schroot-1.6.10/test/sbuild-run-parts.cc Examining data/schroot-1.6.10/test/schroot-base-option-action.cc Examining data/schroot-1.6.10/test/test-helpers.h Examining data/schroot-1.6.10/test/test-sbuild-chroot.h Examining data/schroot-1.6.10/test/testmain.cc Examining data/schroot-1.6.10/test/sbuild-chroot-block-device.cc Examining data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc Examining data/schroot-1.6.10/test/sbuild-chroot-custom.cc Examining data/schroot-1.6.10/test/sbuild-chroot-directory.cc Examining data/schroot-1.6.10/test/sbuild-chroot-file.cc Examining data/schroot-1.6.10/test/sbuild-chroot-loopback.cc Examining data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc Examining data/schroot-1.6.10/test/sbuild-chroot-plain.cc Examining data/schroot-1.6.10/test/sbuild-keyfile.cc Examining data/schroot-1.6.10/test/sbuild-regex.cc Examining data/schroot-1.6.10/test/sbuild-util.cc Examining data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc FINAL RESULTS: data/schroot-1.6.10/doc/historical/sbuild-chroot-helper.c:346:7: [4] (shell) execl: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. if (execl (shell, shell, (const char *) NULL)) data/schroot-1.6.10/sbuild/sbuild-environment.cc:168:12: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). std::strcpy(ret[idx], envitem.c_str()); data/schroot-1.6.10/sbuild/sbuild-util.cc:452:15: [4] (race) access: This usually indicates a security flaw. If an attacker can change anything along the path between the call to access() and the file's actual use (e.g., by moving files), the attacker can exploit the race condition (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid()) and try to open the file directly. access (absname.c_str(), X_OK) == 0) data/schroot-1.6.10/sbuild/sbuild-util.cc:473:12: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). std::strcpy(ret[i], str[i].c_str()); data/schroot-1.6.10/bin/csbuild/csbuild-main.cc:166:14: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!opts->chroot.empty()) data/schroot-1.6.10/bin/csbuild/csbuild-main.cc:168:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::string chroot("--chroot="); data/schroot-1.6.10/bin/csbuild/csbuild-main.cc:169:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot += opts->chroot; data/schroot-1.6.10/bin/csbuild/csbuild-main.cc:170:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. command.push_back(chroot); data/schroot-1.6.10/bin/csbuild/csbuild-options.cc:58:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/bin/csbuild/csbuild-options.cc:131:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. ("chroot,c", opt::value<std::string>(&this->chroot), data/schroot-1.6.10/bin/csbuild/csbuild-options.h:99:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::string chroot; data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-options.cc:56:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot.add_options() data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-session.cc:55:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_login_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-session.cc:79:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_user_command (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-session.cc:101:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (session_chroot->get_verbosity() != sbuild::chroot::VERBOSITY_QUIET) data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-session.h:53:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_login_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot-dsa/dchroot-dsa-session.h:57:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_user_command (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot/dchroot-options.cc:54:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot.add_options() data/schroot-1.6.10/bin/dchroot/dchroot-session-base.cc:64:48: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session_base::get_command_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot/dchroot-session-base.h:57:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_command_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot/dchroot-session.cc:55:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_login_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot/dchroot-session.cc:85:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_user_command (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot/dchroot-session.cc:112:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (session_chroot->get_verbosity() != sbuild::chroot::VERBOSITY_QUIET) data/schroot-1.6.10/bin/dchroot/dchroot-session.h:53:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_login_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/dchroot/dchroot-session.h:57:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_user_command (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/bin/schroot-listmounts/schroot-listmounts-main.cc:90:19: [3] (buffer) realpath: This function does not protect against buffer overflows, and some implementations can overflow internally (CWE-120/CWE-785!). Ensure that the destination buffer is at least of size MAXPATHLEN, andto protect against implementation problems, the input argument should also be checked to ensure it is no larger than MAXPATHLEN. char *rpath = realpath(to_find.c_str(), NULL); data/schroot-1.6.10/bin/schroot-mount/schroot-mount-main.cc:109:25: [3] (buffer) realpath: This function does not protect against buffer overflows, and some implementations can overflow internally (CWE-120/CWE-785!). Ensure that the destination buffer is at least of size MAXPATHLEN, andto protect against implementation problems, the input argument should also be checked to ensure it is no larger than MAXPATHLEN. char *resolved_path = realpath(directory.c_str(), 0); data/schroot-1.6.10/bin/schroot-mount/schroot-mount-main.cc:177:37: [3] (buffer) realpath: This function does not protect against buffer overflows, and some implementations can overflow internally (CWE-120/CWE-785!). Ensure that the destination buffer is at least of size MAXPATHLEN, andto protect against implementation problems, the input argument should also be checked to ensure it is no larger than MAXPATHLEN. char *resolved_path = realpath(opts->mountpoint.c_str(), 0); data/schroot-1.6.10/bin/schroot-mount/schroot-mount-main.cc:184:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (chroot(basepath.c_str()) < 0) data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-session.cc:58:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr const& chroot) const data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-session.cc:58:61: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr const& chroot) const data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-session.cc:65:70: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot)); data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-session.h:49:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr const& chroot) const; data/schroot-1.6.10/bin/schroot-sbuild/schroot-sbuild-session.h:49:56: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr const& chroot) const; data/schroot-1.6.10/bin/schroot/schroot-options-base.cc:65:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(_("Chroot selection")), data/schroot-1.6.10/bin/schroot/schroot-options-base.cc:101:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot.add_options() data/schroot-1.6.10/bin/schroot/schroot-options-base.cc:119:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot.options().empty()) data/schroot-1.6.10/bin/schroot/schroot-options-base.cc:121:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot.primary_keys().empty()) data/schroot-1.6.10/bin/schroot/schroot-options-base.cc:124:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. visible.add(chroot); data/schroot-1.6.10/bin/schroot/schroot-options-base.cc:125:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. global.add(chroot); data/schroot-1.6.10/bin/schroot/schroot-options-base.h:144:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. boost::program_options::options_description chroot; data/schroot-1.6.10/bin/schroot/schroot-options.cc:54:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot.add_options() data/schroot-1.6.10/doc/historical/sbuild-chroot-helper.c:308:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (chroot (CHROOT)) data/schroot-1.6.10/doc/historical/sbuild-chroot-helper.c:335:14: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. if (chdir (getenv("HOME"))) data/schroot-1.6.10/doc/historical/sbuild-chroot-helper.c:337:64: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. fprintf (stderr, "warning: Could not chdir to %s: %s\n", getenv("HOME"), data/schroot-1.6.10/sbuild/sbuild-auth.cc:302:24: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. const char *term = getenv("TERM"); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:37:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:45:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(rhs), data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:84:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:84:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:87:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:87:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:92:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:93:46: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:93:60: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:95:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:99:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:99:54: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:102:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. this->chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:102:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. this->chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:109:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:109:54: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:112:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:112:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:119:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:119:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:123:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.cc:123:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:37:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot_block_device_base : public chroot data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:46:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:75:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:75:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:79:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:79:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:83:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:83:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:87:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:87:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:91:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device-base.h:91:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:67:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:73:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:89:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:104:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:104:47: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:107:39: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:111:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:136:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot *base = dynamic_cast<const chroot *>(this); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:136:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot *base = dynamic_cast<const chroot *>(this); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:170:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:171:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:171:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:173:54: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot_block_device_base::get_session_flags(chroot); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:177:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:177:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:180:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:184:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:184:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:187:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:191:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:191:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.cc:195:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:38:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. typedef chroot::error error; data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:52:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:61:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:64:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:70:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:77:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:77:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:81:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:81:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:85:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:91:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:91:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:95:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:95:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:99:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-block-device.h:99:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:39:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:48:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(rhs), data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:59:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:65:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:81:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:155:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:155:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:158:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:158:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:166:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:179:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:180:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:180:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:191:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:191:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:194:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:194:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:205:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:205:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:208:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:208:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:232:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:232:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_btrfs_snapshot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:236:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.cc:236:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:32:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot_btrfs_snapshot : public chroot data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:41:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:47:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:50:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:56:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:118:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:118:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:122:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:122:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:126:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:131:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:131:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:135:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:135:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:139:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-btrfs-snapshot.h:139:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:75:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_alphasort (sbuild::chroot::ptr const& c1, data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:76:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr const& c2) data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:190:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:190:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:203:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroots.insert(std::make_pair(name, chroot)); data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:337:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:348:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:365:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:379:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot *null_chroot = 0; data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:380:14: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::ptr(null_chroot); data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:384:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:524:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr chroot = find_alias(namespace_hint, *pos); data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:525:12: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot) data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:528:47: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. validated.insert(std::make_pair(*pos, chroot)); data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:613:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr chroot = chroot::create(type); data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:613:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr chroot = chroot::create(type); data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:638:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. assert(chroot); data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:651:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. kconfig >> chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:653:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. add(chroot_namespace, chroot, kconfig); data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:662:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr source_chroot = chroot->clone_source(); data/schroot-1.6.10/sbuild/sbuild-chroot-config.h:46:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. typedef std::vector<chroot::ptr> chroot_list; data/schroot-1.6.10/sbuild/sbuild-chroot-config.h:50:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. typedef std::map<std::string, chroot::ptr> chroot_map; data/schroot-1.6.10/sbuild/sbuild-chroot-config.h:147:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-config.h:147:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-config.h:202:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-config.h:213:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-config.h:224:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-config.h:236:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:38:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:44:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(rhs), data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:53:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:59:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:75:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:128:27: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:128:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:131:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:131:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:143:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:158:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:159:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:159:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:165:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (chroot.get_facet<chroot_facet_session>() && data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:173:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:173:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:176:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:176:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:180:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:180:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:183:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:183:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:192:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:192:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_custom::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:196:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-custom.cc:196:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:37:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot_custom : public chroot data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:46:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:52:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:55:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:61:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:103:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:103:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:113:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:113:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:117:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:122:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:122:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:126:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:126:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:130:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-custom.h:130:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:35:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:41:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(rhs), data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:46:53: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::chroot_directory_base (const chroot& rhs): data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:47:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(rhs), data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:66:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. throw chroot::error(directory, DIRECTORY_ABS); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:72:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:72:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:75:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:75:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:81:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:81:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:84:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:84:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:90:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:90:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:93:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:93:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:100:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:100:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:104:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.cc:104:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:39:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot_directory_base : public chroot data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:49:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base (const chroot& rhs); data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:51:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:74:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:74:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:79:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:79:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:83:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:83:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:87:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory-base.h:87:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:70:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:76:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:92:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:113:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:113:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:116:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:128:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:141:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:142:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:142:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:144:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:148:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:148:47: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:151:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:155:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:155:46: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:158:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:162:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:162:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.cc:166:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_directory_base::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:49:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:58:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:61:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:67:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:74:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:74:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:81:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:81:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:85:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:90:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:90:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:94:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:94:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:98:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-directory.h:98:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:99:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. throw chroot::error(location, chroot::LOCATION_ABS); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:99:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. throw chroot::error(location, chroot::LOCATION_ABS); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:105:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:105:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:113:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:114:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:114:58: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:116:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:120:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:120:53: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:132:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:132:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:135:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. bool session = static_cast<bool>(chroot.get_facet<chroot_facet_session>()); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:139:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:143:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:147:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:152:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:152:53: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_mountable::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:156:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. bool session = static_cast<bool>(chroot.get_facet<chroot_facet_session>()); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:159:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:167:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.cc:173:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:120:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:120:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:123:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:124:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:124:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:127:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:127:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:131:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:131:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:135:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-mountable.h:135:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:72:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:72:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:77:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:78:46: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:78:60: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:80:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return sbuild::chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:84:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:84:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:93:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:93:54: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:99:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), "personality"); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:103:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:103:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_personality::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.cc:108:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), "personality", data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:79:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:79:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:82:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:83:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:83:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:86:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:86:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:90:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:90:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:94:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-personality.h:94:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:85:53: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::clone_session_setup (chroot const& parent, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:86:53: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr& clone, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:237:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:237:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:242:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:243:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:243:65: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:245:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::SESSION_CREATE; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:249:45: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:249:60: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:255:45: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:255:59: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:261:45: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.cc:261:60: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session_clonable::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:75:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. clone_session_setup (chroot const& parent, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:76:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr& clone, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:83:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:83:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:86:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:87:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:87:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:90:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:90:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:94:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:94:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:98:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session-clonable.h:98:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:42:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::chroot_facet_session (const chroot::ptr& parent_chroot): data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:57:39: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return ptr(new chroot_facet_session(chroot::ptr())); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:61:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::create (const chroot::ptr& parent_chroot) data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:107:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot::ptr& data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:114:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:114:48: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:126:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:127:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:127:56: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:129:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags flags = sbuild::chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:129:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags flags = sbuild::chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:132:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. flags = flags | sbuild::chroot::SESSION_SOURCE; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:138:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:138:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:145:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot.get_name().empty()) data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:146:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. detail.add(_("Session ID"), chroot.get_name()); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:150:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:150:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:154:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:158:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:163:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:163:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:176:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:182:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:188:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:194:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:200:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:206:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.cc:212:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:50:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_session (const chroot::ptr& parent_chroot); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:72:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. create (const chroot::ptr& parent_chroot); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:119:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot::ptr& data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:123:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:123:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:126:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:127:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:127:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:130:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:130:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:134:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:134:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:138:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:138:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-session.h:148:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot::ptr parent_chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:70:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::clone_source_setup (chroot const& parent, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:71:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr& clone) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:151:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:151:56: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:156:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:157:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:157:64: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:160:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (chroot.get_facet<chroot_facet_session>()) data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:161:12: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:163:12: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::SESSION_CLONE; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:167:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:167:59: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:178:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:178:58: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:182:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:186:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:190:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:194:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:198:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:203:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:203:59: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source_clonable::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:208:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:214:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:220:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:226:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.cc:232:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:73:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. clone_source_setup (chroot const& parent, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:74:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr& clone) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:167:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:167:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:170:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:171:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:171:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:174:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:174:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:178:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:178:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:182:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source-clonable.h:182:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:60:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:60:47: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:65:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:66:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:66:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:68:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:72:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:72:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:78:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:78:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:84:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.cc:84:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_source::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:67:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:67:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:70:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:71:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:71:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:74:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:74:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:78:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:78:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:82:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-source.h:82:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:147:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot *base = dynamic_cast<chroot *>(this->owner); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:147:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot *base = dynamic_cast<chroot *>(this->owner); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:173:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:173:46: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:188:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:189:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:189:54: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:191:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags flags = sbuild::chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:191:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags flags = sbuild::chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:193:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (get_union_configured() && chroot.get_facet<chroot_facet_session>()) data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:194:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. flags = sbuild::chroot::SESSION_PURGE; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:200:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:200:48: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:219:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:219:48: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:223:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), "union-type"); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:229:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:234:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:239:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:245:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:245:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_union::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:249:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. bool session = static_cast<bool>(chroot.get_facet<chroot_facet_session>()); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:252:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), "union-type", data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:258:6: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot.get_facet<chroot_facet_source_clonable>()); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:260:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. psrc->set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:264:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), "union-mount-options", data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:270:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.cc:279:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:163:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:163:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:166:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:167:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:167:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:170:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:170:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:174:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:174:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:178:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-union.h:178:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:127:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:127:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:149:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:150:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:150:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:152:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return sbuild::chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:156:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:156:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:337:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:337:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:342:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:347:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:354:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile.set_value(chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:361:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:361:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_facet_userdata::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:367:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.cc:374:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:79:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:79:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:82:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:83:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:83:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:86:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:86:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:90:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:90:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:94:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet-userdata.h:94:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:59:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_chroot(chroot& chroot) data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:59:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_chroot(chroot& chroot) data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:61:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. this->owner = &chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:64:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:94:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:94:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:104:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:105:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const = 0; data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:105:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const = 0; data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:114:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:114:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:126:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:126:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:139:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:139:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-facet.h:145:5: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot *owner; data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:38:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:47:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(rhs), data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:58:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:64:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:80:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:121:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. throw chroot::error(location, chroot::LOCATION_ABS); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:121:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. throw chroot::error(location, chroot::LOCATION_ABS); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:158:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:158:39: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:161:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:161:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:170:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:199:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:200:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:200:47: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:204:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (chroot.get_facet<chroot_facet_session>()) data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:211:27: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:211:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:214:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:214:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:225:27: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:225:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:228:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:228:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:236:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:245:27: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:245:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_file::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:249:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:249:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-file.cc:259:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:32:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot_file : public chroot data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:41:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:47:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:50:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:56:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:116:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:116:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:123:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:123:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:127:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:132:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:132:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:136:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:136:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:140:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-file.h:140:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:42:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:56:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(rhs), data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:61:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:67:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:83:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:135:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:135:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:138:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:138:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:144:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:171:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:172:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:172:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:174:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return chroot::SESSION_NOFLAGS; data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:178:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:178:46: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:181:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:181:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:188:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:188:45: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:191:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:191:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:198:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:198:46: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_loopback::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:202:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.cc:202:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:33:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot_loopback : public chroot data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:37:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. typedef chroot::error error; data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:46:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:52:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:55:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:61:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:87:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:87:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:91:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:91:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:95:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:100:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:100:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:104:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:104:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:108:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-loopback.h:108:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:57:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:63:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:79:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:134:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:134:47: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:137:39: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:145:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:191:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:192:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:192:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:203:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:203:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:206:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:215:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:215:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:218:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:236:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:236:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_lvm_snapshot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.cc:240:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_block_device_base::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:41:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:47:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:50:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:56:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:99:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:99:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:103:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:103:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:107:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:112:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:112:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:116:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:116:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:120:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-lvm-snapshot.h:120:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-plain.cc:47:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-plain.cc:53:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-plain.cc:62:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-plain.cc:83:27: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_plain::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-plain.cc:90:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-plain.cc:91:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_plain::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-plain.cc:91:48: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_plain::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-plain.h:40:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-plain.h:46:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-plain.h:49:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-plain.h:55:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-plain.h:65:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-plain.h:65:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-plain.h:69:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:40:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:51:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(rhs), data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:63:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:69:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:85:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:178:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:178:47: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:181:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:181:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_env(chroot, env); data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:186:7: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (chroot.get_facet<chroot_facet_source>()) data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:195:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:208:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:209:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:209:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::get_session_flags (chroot const& chroot) const data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:220:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:220:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:223:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:223:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_details(chroot, detail); data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:236:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:236:49: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:239:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:239:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_keyfile(chroot, keyfile); data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:269:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:269:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot_zfs_snapshot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:273:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.cc:273:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::set_keyfile(chroot, keyfile, used_keys); data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:33:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot_zfs_snapshot : public chroot data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:42:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. friend class chroot; data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:48:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:51:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:57:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:131:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:131:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:135:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:135:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:139:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_lock (chroot::setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:144:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:144:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:148:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:148:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:152:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot-zfs-snapshot.h:152:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:67:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. typedef std::pair<sbuild::chroot::error_code,const char *> emap; data/schroot-1.6.10/sbuild/sbuild-chroot.cc:75:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::CHROOT_CREATE, N_("Chroot creation failed")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:76:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::CHROOT_DEVICE, N_("Device name not set")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:78:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::CHROOT_TYPE, N_("Unknown chroot type ‘%1%’")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:79:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::DEVICE_ABS, N_("Device must have an absolute path")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:80:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::DEVICE_LOCK, N_("Failed to lock device")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:81:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::DEVICE_NOTBLOCK, N_("File is not a block device")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:82:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::DEVICE_UNLOCK, N_("Failed to unlock device")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:83:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::DIRECTORY_ABS, N_("Directory must have an absolute path")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:84:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::FACET_INVALID, N_("Attempt to add object which is not a facet")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:85:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::FACET_PRESENT, N_("Attempt to add facet which is already in use")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:86:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::FILE_ABS, N_("File must have an absolute path")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:87:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::FILE_LOCK, N_("Failed to acquire file lock")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:88:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::FILE_NOTREG, N_("File is not a regular file")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:89:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::FILE_OWNER, N_("File is not owned by user root")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:90:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::FILE_PERMS, N_("File has write permissions for others")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:91:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::FILE_UNLOCK, N_("Failed to discard file lock")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:92:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::LOCATION_ABS, N_("Location must have an absolute path")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:93:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::NAME_INVALID, N_("Invalid name")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:94:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::SCRIPT_CONFIG_CV, N_("Could not set profile name from script configuration path ‘%1%’")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:97:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::SESSION_UNLINK, N_("Failed to unlink session file")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:98:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::SESSION_WRITE, N_("Failed to write session file")), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:99:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. emap(sbuild::chroot::VERBOSITY_INVALID, N_("Message verbosity is invalid")) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:105:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. error<sbuild::chroot::error_code>::map_type data/schroot-1.6.10/sbuild/sbuild-chroot.cc:106:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. error<sbuild::chroot::error_code>::error_strings data/schroot-1.6.10/sbuild/sbuild-chroot.cc:110:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::chroot (): data/schroot-1.6.10/sbuild/sbuild-chroot.cc:110:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::chroot (): data/schroot-1.6.10/sbuild/sbuild-chroot.cc:111:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::enable_shared_from_this<chroot>(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:138:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::chroot (const chroot& rhs): data/schroot-1.6.10/sbuild/sbuild-chroot.cc:138:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::chroot (const chroot& rhs): data/schroot-1.6.10/sbuild/sbuild-chroot.cc:138:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::chroot (const chroot& rhs): data/schroot-1.6.10/sbuild/sbuild-chroot.cc:139:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::enable_shared_from_this<chroot>(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:170:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::~chroot () data/schroot-1.6.10/sbuild/sbuild-chroot.cc:170:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::~chroot () data/schroot-1.6.10/sbuild/sbuild-chroot.cc:174:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot.cc:175:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::create (std::string const& type) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:177:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot *new_chroot = 0; data/schroot-1.6.10/sbuild/sbuild-chroot.cc:217:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_name () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:223:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_name (std::string const& name) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:247:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_description () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:253:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_description (std::string const& description) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:259:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_mount_location () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:265:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_mount_location (std::string const& location) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:273:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_users () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:279:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_users (string_list const& users) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:285:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_groups () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:291:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_groups (string_list const& groups) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:297:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_root_users () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:303:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_root_users (string_list const& users) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:309:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_root_groups () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:315:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_root_groups (string_list const& groups) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:321:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_aliases () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:327:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_aliases (string_list const& aliases) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:355:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_preserve_environment () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:361:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_preserve_environment (bool preserve_environment) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:367:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_default_shell () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:373:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_default_shell (std::string const& default_shell) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:379:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_environment_filter () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:385:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_environment_filter (regex const& environment_filter) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:391:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_original () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:397:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_original (bool original) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:403:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_run_setup_scripts () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:409:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_run_setup_scripts (bool run_setup_scripts) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:415:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_script_config () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:421:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_script_config (std::string const& script_config) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:440:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_profile () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:446:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_profile (std::string const& profile) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:462:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_command_prefix () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:468:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_command_prefix (string_list const& command_prefix) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:473:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::verbosity data/schroot-1.6.10/sbuild/sbuild-chroot.cc:474:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_verbosity () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:480:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_verbosity_string () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:486:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. case chroot::VERBOSITY_QUIET: data/schroot-1.6.10/sbuild/sbuild-chroot.cc:489:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. case chroot::VERBOSITY_NORMAL: data/schroot-1.6.10/sbuild/sbuild-chroot.cc:492:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. case chroot::VERBOSITY_VERBOSE: data/schroot-1.6.10/sbuild/sbuild-chroot.cc:507:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_verbosity (chroot::verbosity verbosity) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:507:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_verbosity (chroot::verbosity verbosity) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:513:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_verbosity (std::string const& verbosity) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:526:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::list_facets () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:541:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::setup_env (environment& env) const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:554:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:554:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:554:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:557:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("CHROOT_TYPE", chroot.get_chroot_type()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:558:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("CHROOT_NAME", chroot.get_name()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:559:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("SESSION_ID", chroot.get_name()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:560:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("CHROOT_DESCRIPTION", chroot.get_description()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:561:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("CHROOT_MOUNT_LOCATION", chroot.get_mount_location()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:562:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("CHROOT_PATH", chroot.get_path()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:563:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot.get_script_config().empty()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:564:90: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("CHROOT_SCRIPT_CONFIG", normalname(std::string(SCHROOT_SYSCONF_DIR) + '/' + chroot.get_script_config())); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:565:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot.get_profile().empty()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:567:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("CHROOT_PROFILE", chroot.get_profile()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:568:90: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. env.add("CHROOT_PROFILE_DIR", normalname(std::string(SCHROOT_SYSCONF_DIR) + '/' + chroot.get_profile())); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:571:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & SESSION_CREATE)); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:573:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & SESSION_CLONE)); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:575:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & SESSION_PURGE)); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:577:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & SESSION_SOURCE)); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:581:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::setup_session_info (bool start) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:632:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::lock (setup_type type) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:638:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::unlock (setup_type type, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:644:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot.cc:645:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_session_flags () const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:660:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_details (format_detail& detail) const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:673:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:673:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:673:45: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:676:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. detail.add(_("Name"), chroot.get_name()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:679:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Description"), chroot.get_description()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:680:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Type"), chroot.get_chroot_type()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:681:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Message Verbosity"), chroot.get_verbosity_string()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:682:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Users"), chroot.get_users()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:683:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Groups"), chroot.get_groups()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:684:27: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Root Users"), chroot.get_root_users()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:685:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Root Groups"), chroot.get_root_groups()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:686:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Aliases"), chroot.get_aliases()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:687:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Preserve Environment"), chroot.get_preserve_environment()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:688:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Default Shell"), chroot.get_default_shell()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:689:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Environment Filter"), chroot.get_environment_filter()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:690:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Run Setup Scripts"), chroot.get_run_setup_scripts()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:691:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Configuration Profile"), chroot.get_profile()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:692:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. .add(_("Script Configuration"), chroot.get_script_config()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:694:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & chroot::SESSION_CREATE)) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:694:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & chroot::SESSION_CREATE)) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:696:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & chroot::SESSION_CLONE)) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:696:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & chroot::SESSION_CLONE)) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:698:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & chroot::SESSION_PURGE)); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:698:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. static_cast<bool>(chroot.get_session_flags() & chroot::SESSION_PURGE)); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:700:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot.get_command_prefix().empty()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:701:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. detail.add(_("Command Prefix"), chroot.get_command_prefix()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:704:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot.get_mount_location().empty()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:705:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. detail.add(_("Mount Location"), chroot.get_mount_location()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:706:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (!chroot.get_path().empty()) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:707:27: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. detail.add(_("Path"), chroot.get_path()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:711:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::print_details (std::ostream& stream) const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:728:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_keyfile (keyfile& keyfile) const data/schroot-1.6.10/sbuild/sbuild-chroot.cc:741:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:741:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:741:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:744:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile.remove_group(chroot.get_name()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:749:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_name, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:749:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_name, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:750:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:753:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_chroot_type, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:753:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_chroot_type, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:754:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:757:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_profile, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:757:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_profile, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:758:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:762:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_script_config, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:762:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_script_config, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:763:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:766:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_aliases, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:766:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_aliases, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:767:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:770:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_environment_filter, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:770:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_environment_filter, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:771:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:774:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_description, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:774:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_description, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:775:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:778:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_users, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:778:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_users, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:779:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:782:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_groups, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:782:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_groups, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:783:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:786:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_root_users, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:786:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_root_users, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:787:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:790:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_root_groups, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:790:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_root_groups, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:791:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:795:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_mount_location, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:795:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_mount_location, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:796:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:799:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_command_prefix, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:799:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_list_value(chroot, &chroot::get_command_prefix, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:800:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:803:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_verbosity_string, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:803:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_verbosity_string, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:804:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:807:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_preserve_environment, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:807:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_preserve_environment, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:808:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:811:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_default_shell, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:811:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::set_object_value(chroot, &chroot::get_default_shell, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:812:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:817:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_keyfile (keyfile const& keyfile) data/schroot-1.6.10/sbuild/sbuild-chroot.cc:895:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:895:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:895:45: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:900:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. void (sbuild::chroot::* nullmethod)(bool) = 0; data/schroot-1.6.10/sbuild/sbuild-chroot.cc:907:39: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. string_list keys = keyfile.get_keys(chroot.get_name()); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:917:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, nullmethod, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:918:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:926:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, nullmethod, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:927:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:934:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, nullmethod, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:935:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:939:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, nullmethod, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:940:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:945:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_profile, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:945:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_profile, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:946:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:951:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_script_config, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:951:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_script_config, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:952:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:959:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, nullmethod, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:960:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:967:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_aliases, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:967:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_aliases, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:968:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:973:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_environment_filter, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:973:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_environment_filter, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:974:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:979:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_description, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:979:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_description, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:980:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:985:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_users, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:985:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_users, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:986:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:991:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_groups, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:991:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_groups, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:992:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:997:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_root_users, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:997:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_root_users, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:998:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1003:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_root_groups, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1003:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_root_groups, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1004:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1009:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_mount_location, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1009:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_mount_location, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1010:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1017:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_name, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1017:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_name, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1018:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1025:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_command_prefix, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1025:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_list_value(chroot, &chroot::set_command_prefix, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1026:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1031:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_verbosity, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1031:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_verbosity, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1032:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1037:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_preserve_environment, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1037:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_preserve_environment, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1038:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1043:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_default_shell, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1043:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile::get_object_value(chroot, &chroot::set_default_shell, data/schroot-1.6.10/sbuild/sbuild-chroot.cc:1044:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. keyfile, chroot.get_name(), data/schroot-1.6.10/sbuild/sbuild-chroot.h:45:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot : public std::enable_shared_from_this<chroot> data/schroot-1.6.10/sbuild/sbuild-chroot.h:45:54: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class chroot : public std::enable_shared_from_this<chroot> data/schroot-1.6.10/sbuild/sbuild-chroot.h:105:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. typedef std::shared_ptr<chroot> ptr; data/schroot-1.6.10/sbuild/sbuild-chroot.h:108:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. typedef std::shared_ptr<const chroot> const_ptr; data/schroot-1.6.10/sbuild/sbuild-chroot.h:112:5: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot (); data/schroot-1.6.10/sbuild/sbuild-chroot.h:115:5: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot (const chroot& rhs); data/schroot-1.6.10/sbuild/sbuild-chroot.h:115:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot (const chroot& rhs); data/schroot-1.6.10/sbuild/sbuild-chroot.h:119:14: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual ~chroot (); data/schroot-1.6.10/sbuild/sbuild-chroot.h:147:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot.h:158:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::ptr data/schroot-1.6.10/sbuild/sbuild-chroot.h:522:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.h:522:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.h:666:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot.h:667:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const = 0; data/schroot-1.6.10/sbuild/sbuild-chroot.h:667:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (chroot const& chroot) const = 0; data/schroot-1.6.10/sbuild/sbuild-chroot.h:733:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.h:733:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.h:766:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.h:766:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (chroot const& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.h:791:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.h:791:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (chroot& chroot, data/schroot-1.6.10/sbuild/sbuild-chroot.h:845:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot.h:846:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. inline operator | (chroot::session_flags const& lhs, data/schroot-1.6.10/sbuild/sbuild-chroot.h:847:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::session_flags const& rhs) data/schroot-1.6.10/sbuild/sbuild-chroot.h:849:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return static_cast<chroot::session_flags> data/schroot-1.6.10/sbuild/sbuild-chroot.h:859:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::session_flags data/schroot-1.6.10/sbuild/sbuild-chroot.h:860:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. inline operator & (chroot::session_flags const& lhs, data/schroot-1.6.10/sbuild/sbuild-chroot.h:861:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::session_flags const& rhs) data/schroot-1.6.10/sbuild/sbuild-chroot.h:863:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. return static_cast<chroot::session_flags> data/schroot-1.6.10/sbuild/sbuild-chroot.h:876:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_facet () data/schroot-1.6.10/sbuild/sbuild-chroot.h:893:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::get_facet () const data/schroot-1.6.10/sbuild/sbuild-chroot.h:910:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::add_facet (std::shared_ptr<T> facet) data/schroot-1.6.10/sbuild/sbuild-chroot.h:930:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::remove_facet () data/schroot-1.6.10/sbuild/sbuild-chroot.h:946:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::remove_facet (std::shared_ptr<T> facet) data/schroot-1.6.10/sbuild/sbuild-chroot.h:953:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::replace_facet (std::shared_ptr<T> facet) data/schroot-1.6.10/sbuild/sbuild-session.cc:435:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_chroot_membership (chroot::ptr const& chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:435:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_chroot_membership (chroot::ptr const& chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:489:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr const& chroot) const data/schroot-1.6.10/sbuild/sbuild-session.cc:489:53: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr const& chroot) const data/schroot-1.6.10/sbuild/sbuild-session.cc:496:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_chroot_membership(chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:555:70: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_chroot_auth_status(status, cur->chroot)); data/schroot-1.6.10/sbuild/sbuild-session.cc:638:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot::ptr ch = cur->chroot; data/schroot-1.6.10/sbuild/sbuild-session.cc:638:39: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. const chroot::ptr ch = cur->chroot; data/schroot-1.6.10/sbuild/sbuild-session.cc:642:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (ch->get_session_flags() & chroot::SESSION_CREATE && data/schroot-1.6.10/sbuild/sbuild-session.cc:649:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr chroot(ch->clone()); data/schroot-1.6.10/sbuild/sbuild-session.cc:649:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr chroot(ch->clone()); data/schroot-1.6.10/sbuild/sbuild-session.cc:650:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. assert(chroot); data/schroot-1.6.10/sbuild/sbuild-session.cc:653:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (ch->get_session_flags() & chroot::SESSION_CREATE) data/schroot-1.6.10/sbuild/sbuild-session.cc:676:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_chroot_membership(chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:686:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. assert(chroot); data/schroot-1.6.10/sbuild/sbuild-session.cc:717:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot(chroot, chroot::SETUP_START); data/schroot-1.6.10/sbuild/sbuild-session.cc:717:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot(chroot, chroot::SETUP_START); data/schroot-1.6.10/sbuild/sbuild-session.cc:724:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot(chroot, chroot::SETUP_RECOVER); data/schroot-1.6.10/sbuild/sbuild-session.cc:724:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot(chroot, chroot::SETUP_RECOVER); data/schroot-1.6.10/sbuild/sbuild-session.cc:734:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. run_chroot(chroot); data/schroot-1.6.10/sbuild/sbuild-session.cc:754:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot(chroot, chroot::SETUP_STOP); data/schroot-1.6.10/sbuild/sbuild-session.cc:754:40: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot(chroot, chroot::SETUP_STOP); data/schroot-1.6.10/sbuild/sbuild-session.cc:766:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot(chroot, chroot::SETUP_STOP); data/schroot-1.6.10/sbuild/sbuild-session.cc:766:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot(chroot, chroot::SETUP_STOP); data/schroot-1.6.10/sbuild/sbuild-session.cc:788:41: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_login_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:823:43: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_command_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:840:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_shells (sbuild::chroot::ptr& session_chroot) const data/schroot-1.6.10/sbuild/sbuild-session.cc:884:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_shell (sbuild::chroot::ptr& session_chroot) const data/schroot-1.6.10/sbuild/sbuild-session.cc:918:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_command (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:932:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_login_command (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:977:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (session_chroot->get_verbosity() == chroot::VERBOSITY_VERBOSE) data/schroot-1.6.10/sbuild/sbuild-session.cc:1018:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::get_user_command (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:1038:42: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (session_chroot->get_verbosity() == chroot::VERBOSITY_VERBOSE) data/schroot-1.6.10/sbuild/sbuild-session.cc:1062:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::setup_chroot (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.cc:1063:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::setup_type setup_type) data/schroot-1.6.10/sbuild/sbuild-session.cc:1072:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_type == chroot::SETUP_START) || data/schroot-1.6.10/sbuild/sbuild-session.cc:1074:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_type == chroot::SETUP_RECOVER) || data/schroot-1.6.10/sbuild/sbuild-session.cc:1076:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_type == chroot::SETUP_STOP) || data/schroot-1.6.10/sbuild/sbuild-session.cc:1078:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (setup_type == chroot::SETUP_START || data/schroot-1.6.10/sbuild/sbuild-session.cc:1079:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_type == chroot::SETUP_STOP)))) data/schroot-1.6.10/sbuild/sbuild-session.cc:1086:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if ((setup_type == chroot::SETUP_START || data/schroot-1.6.10/sbuild/sbuild-session.cc:1087:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_type == chroot::SETUP_RECOVER || data/schroot-1.6.10/sbuild/sbuild-session.cc:1088:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_type == chroot::SETUP_STOP) && data/schroot-1.6.10/sbuild/sbuild-session.cc:1092:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (setup_type == chroot::SETUP_START) data/schroot-1.6.10/sbuild/sbuild-session.cc:1099:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. catch (chroot::error const& e) data/schroot-1.6.10/sbuild/sbuild-session.cc:1108:14: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. catch (chroot::error const& ignore) data/schroot-1.6.10/sbuild/sbuild-session.cc:1115:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (setup_type == chroot::SETUP_START) data/schroot-1.6.10/sbuild/sbuild-session.cc:1117:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. else if (setup_type == chroot::SETUP_RECOVER) data/schroot-1.6.10/sbuild/sbuild-session.cc:1119:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. else if (setup_type == chroot::SETUP_STOP) data/schroot-1.6.10/sbuild/sbuild-session.cc:1174:32: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. rp.set_reverse(setup_type == chroot::SETUP_STOP); data/schroot-1.6.10/sbuild/sbuild-session.cc:1175:53: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. rp.set_verbose(session_chroot->get_verbosity() == chroot::VERBOSITY_VERBOSE); data/schroot-1.6.10/sbuild/sbuild-session.cc:1227:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. catch (chroot::error const& e) data/schroot-1.6.10/sbuild/sbuild-session.cc:1245:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::run_child (sbuild::chroot::ptr& session_chroot) data/schroot-1.6.10/sbuild/sbuild-session.cc:1295:9: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. if (::chroot (location.c_str())) data/schroot-1.6.10/sbuild/sbuild-session.cc:1481:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. session::run_chroot (sbuild::chroot::ptr& session_chroot) data/schroot-1.6.10/sbuild/sbuild-session.h:54:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/sbuild/sbuild-session.h:54:27: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/sbuild/sbuild-session.h:306:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_chroot_membership (chroot::ptr const& chroot, data/schroot-1.6.10/sbuild/sbuild-session.h:306:47: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_chroot_membership (chroot::ptr const& chroot, data/schroot-1.6.10/sbuild/sbuild-session.h:319:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-session.h:319:48: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr const& chroot) const; data/schroot-1.6.10/sbuild/sbuild-session.h:359:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_login_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.h:371:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_command_directories (sbuild::chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.h:383:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_shells (sbuild::chroot::ptr& session_chroot) const; data/schroot-1.6.10/sbuild/sbuild-session.h:394:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_shell (sbuild::chroot::ptr& session_chroot) const; data/schroot-1.6.10/sbuild/sbuild-session.h:405:18: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_command (chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.h:419:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_login_command (chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.h:433:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_user_command (chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.h:452:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot (chroot::ptr& session_chroot, data/schroot-1.6.10/sbuild/sbuild-session.h:453:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::setup_type setup_type); data/schroot-1.6.10/sbuild/sbuild-session.h:463:17: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. run_chroot (chroot::ptr& session_chroot); data/schroot-1.6.10/sbuild/sbuild-session.h:473:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. run_child (chroot::ptr& session_chroot); data/schroot-1.6.10/sbuild/sbuild-types.h:126:26: [3] (random) setstate: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. stream.setstate(std::ios::failbit); data/schroot-1.6.10/sbuild/sbuild-types.h:138:16: [3] (random) setstate: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. stream.setstate(err); data/schroot-1.6.10/sbuild/sbuild-util.cc:85:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. bool chroot_alphasort (sbuild::chroot::ptr const& c1, data/schroot-1.6.10/sbuild/sbuild-util.cc:86:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr const& c2) data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:82:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:94:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:94:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:96:63: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_block_device>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:98:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_block_device> c = std::dynamic_pointer_cast<sbuild::chroot_block_device>(chroot); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:112:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_block_device> c = std::dynamic_pointer_cast<sbuild::chroot_block_device>(chroot); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:160:59: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_block_device>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:270:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot, expected, group); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:340:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:343:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_NOFLAGS); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:347:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE | data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:348:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:351:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_PURGE); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:354:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:361:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-block-device.cc:370:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:54:63: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_TEST_EXCEPTION(test_source_subvolume_error, sbuild::chroot::error); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:55:65: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_TEST_EXCEPTION(test_snapshot_directory_error, sbuild::chroot::error); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:56:60: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_TEST_EXCEPTION(test_snapshot_name_error, sbuild::chroot::error); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:80:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:86:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:86:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:88:65: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_btrfs_snapshot>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:90:113: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_btrfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_btrfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:99:113: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_btrfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_btrfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:108:113: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_btrfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_btrfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:117:113: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_btrfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_btrfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:126:113: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_btrfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_btrfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:134:113: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_btrfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_btrfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:142:113: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_btrfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_btrfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:171:61: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_btrfs_snapshot>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:176:113: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_btrfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_btrfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:245:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot,expected, chroot->get_name()); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:302:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE | data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:303:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:306:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_PURGE)); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:312:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE)); data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:318:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-btrfs-snapshot.cc:327:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot-config.cc:120:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/test/sbuild-chroot-config.cc:120:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/test/sbuild-chroot-config.cc:123:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT((chroot)); data/schroot-1.6.10/test/sbuild-chroot-config.cc:127:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT((!chroot)); data/schroot-1.6.10/test/sbuild-chroot-config.cc:130:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT((!chroot)); data/schroot-1.6.10/test/sbuild-chroot-config.cc:135:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/test/sbuild-chroot-config.cc:135:25: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/test/sbuild-chroot-config.cc:138:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT((chroot)); data/schroot-1.6.10/test/sbuild-chroot-config.cc:142:21: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT((chroot)); data/schroot-1.6.10/test/sbuild-chroot-config.cc:146:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT((!chroot)); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:72:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:78:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-custom.cc:78:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-custom.cc:80:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_custom>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:82:97: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_custom> c = std::dynamic_pointer_cast<sbuild::chroot_custom>(chroot); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:93:97: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_custom> c = std::dynamic_pointer_cast<sbuild::chroot_custom>(chroot); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:124:53: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_custom>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:138:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot, expected, group); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:143:97: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_custom> c = std::dynamic_pointer_cast<sbuild::chroot_custom>(chroot); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:147:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:155:97: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_custom> c = std::dynamic_pointer_cast<sbuild::chroot_custom>(chroot); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:160:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_NOFLAGS); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:168:97: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_custom> c = std::dynamic_pointer_cast<sbuild::chroot_custom>(chroot); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:173:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE|sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:173:60: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE|sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:181:97: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_custom> c = std::dynamic_pointer_cast<sbuild::chroot_custom>(chroot); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:187:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CLONE); data/schroot-1.6.10/test/sbuild-chroot-custom.cc:196:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-custom.cc:205:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot-directory.cc:83:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:95:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-directory.cc:95:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-directory.cc:97:60: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_directory>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:99:103: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_directory> c = std::dynamic_pointer_cast<sbuild::chroot_directory>(chroot); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:107:103: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_directory> c = std::dynamic_pointer_cast<sbuild::chroot_directory>(chroot); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:143:56: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_directory>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:246:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot, expected, group); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:367:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:370:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_NOFLAGS); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:374:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE | data/schroot-1.6.10/test/sbuild-chroot-directory.cc:375:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:378:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_PURGE); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:381:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot-directory.cc:388:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-directory.cc:397:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot-facet-userdata.cc:47:5: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/test/sbuild-chroot-facet-userdata.cc:53:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot = sbuild::chroot::create("directory"); data/schroot-1.6.10/test/sbuild-chroot-facet-userdata.cc:54:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-facet-userdata.cc:71:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. this->chroot = sbuild::chroot::ptr(); data/schroot-1.6.10/test/sbuild-chroot-facet-userdata.cc:169:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/test/sbuild-chroot-facet-userdata.cc:169:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/test/sbuild-chroot-file.cc:53:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_TEST_EXCEPTION(test_location_invalid, sbuild::chroot::error); data/schroot-1.6.10/test/sbuild-chroot-file.cc:77:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-file.cc:89:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-file.cc:89:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-file.cc:91:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_file>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-file.cc:93:93: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_file> c = std::dynamic_pointer_cast<sbuild::chroot_file>(chroot); data/schroot-1.6.10/test/sbuild-chroot-file.cc:102:93: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_file> c = std::dynamic_pointer_cast<sbuild::chroot_file>(chroot); data/schroot-1.6.10/test/sbuild-chroot-file.cc:115:94: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_file> fc = std::dynamic_pointer_cast<sbuild::chroot_file>(chroot); data/schroot-1.6.10/test/sbuild-chroot-file.cc:128:94: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_file> fc = std::dynamic_pointer_cast<sbuild::chroot_file>(chroot); data/schroot-1.6.10/test/sbuild-chroot-file.cc:135:94: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_file> fc = std::dynamic_pointer_cast<sbuild::chroot_file>(chroot); data/schroot-1.6.10/test/sbuild-chroot-file.cc:160:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_file>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-file.cc:173:51: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_file>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-file.cc:238:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot, expected, group); data/schroot-1.6.10/test/sbuild-chroot-file.cc:288:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE | data/schroot-1.6.10/test/sbuild-chroot-file.cc:289:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-file.cc:292:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_PURGE); data/schroot-1.6.10/test/sbuild-chroot-file.cc:295:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot-file.cc:301:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-file.cc:310:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:90:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:102:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:102:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:104:59: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_loopback>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:106:101: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_loopback> c = std::dynamic_pointer_cast<sbuild::chroot_loopback>(chroot); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:119:101: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_loopback> c = std::dynamic_pointer_cast<sbuild::chroot_loopback>(chroot); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:159:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_loopback>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:274:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot, expected, group); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:359:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:362:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_NOFLAGS); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:366:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE | data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:367:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:370:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_PURGE); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:373:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:380:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-loopback.cc:389:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:77:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:83:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:83:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:85:63: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_lvm_snapshot>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:87:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_lvm_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_lvm_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:103:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_lvm_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_lvm_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:112:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_lvm_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_lvm_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:144:59: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_lvm_snapshot>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:149:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_lvm_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_lvm_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:220:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot,expected, chroot->get_name()); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:275:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE | data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:276:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:279:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_PURGE)); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:285:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE)); data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:291:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-lvm-snapshot.cc:300:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot-plain.cc:65:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-plain.cc:71:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-plain.cc:71:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-plain.cc:73:56: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_plain>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-plain.cc:75:95: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_plain> c = std::dynamic_pointer_cast<sbuild::chroot_plain>(chroot); data/schroot-1.6.10/test/sbuild-chroot-plain.cc:84:95: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_plain> c = std::dynamic_pointer_cast<sbuild::chroot_plain>(chroot); data/schroot-1.6.10/test/sbuild-chroot-plain.cc:109:52: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_plain>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-plain.cc:121:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot, expected, group); data/schroot-1.6.10/test/sbuild-chroot-plain.cc:127:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_NOFLAGS); data/schroot-1.6.10/test/sbuild-chroot-plain.cc:133:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-plain.cc:142:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:78:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:84:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:84:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:86:63: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_zfs_snapshot>::setup_chroot_props(chroot); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:88:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_zfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_zfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:103:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_zfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_zfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:112:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_zfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_zfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:144:59: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_chroot_base<chroot_zfs_snapshot>::test_setup_env(chroot, expected); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:149:109: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<sbuild::chroot_zfs_snapshot> c = std::dynamic_pointer_cast<sbuild::chroot_zfs_snapshot>(chroot); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:220:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot,expected, chroot->get_name()); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:280:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE | data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:281:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CLONE)); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:284:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_PURGE)); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:290:29: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (sbuild::chroot::SESSION_CREATE)); data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:296:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot-zfs-snapshot.cc:305:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/sbuild-chroot.cc:33:37: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. class basic_chroot : public sbuild::chroot data/schroot-1.6.10/test/sbuild-chroot.cc:37:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot() data/schroot-1.6.10/test/sbuild-chroot.cc:55:3: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot::ptr data/schroot-1.6.10/test/sbuild-chroot.cc:66:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::set_run_setup_scripts(run_setup_scripts); data/schroot-1.6.10/test/sbuild-chroot.cc:74:22: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (sbuild::chroot const& chroot, data/schroot-1.6.10/test/sbuild-chroot.cc:74:36: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_env (sbuild::chroot const& chroot, data/schroot-1.6.10/test/sbuild-chroot.cc:76:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { sbuild::chroot::setup_env(chroot, env); } data/schroot-1.6.10/test/sbuild-chroot.cc:76:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { sbuild::chroot::setup_env(chroot, env); } data/schroot-1.6.10/test/sbuild-chroot.cc:79:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (sbuild::chroot const& chroot, data/schroot-1.6.10/test/sbuild-chroot.cc:79:39: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_details (sbuild::chroot const& chroot, data/schroot-1.6.10/test/sbuild-chroot.cc:81:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { sbuild::chroot::get_details(chroot, detail); } data/schroot-1.6.10/test/sbuild-chroot.cc:81:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { sbuild::chroot::get_details(chroot, detail); } data/schroot-1.6.10/test/sbuild-chroot.cc:89:19: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual sbuild::chroot::session_flags data/schroot-1.6.10/test/sbuild-chroot.cc:90:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (sbuild::chroot const& chroot) const data/schroot-1.6.10/test/sbuild-chroot.cc:90:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_session_flags (sbuild::chroot const& chroot) const data/schroot-1.6.10/test/sbuild-chroot.cc:91:20: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { return sbuild::chroot::SESSION_CREATE; } data/schroot-1.6.10/test/sbuild-chroot.cc:94:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (sbuild::chroot const& chroot, data/schroot-1.6.10/test/sbuild-chroot.cc:94:38: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. get_keyfile (sbuild::chroot const& chroot, data/schroot-1.6.10/test/sbuild-chroot.cc:96:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { sbuild::chroot::get_keyfile(chroot, keyfile); } data/schroot-1.6.10/test/sbuild-chroot.cc:96:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { sbuild::chroot::get_keyfile(chroot, keyfile); } data/schroot-1.6.10/test/sbuild-chroot.cc:99:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (sbuild::chroot& chroot, data/schroot-1.6.10/test/sbuild-chroot.cc:99:39: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. set_keyfile (sbuild::chroot& chroot, data/schroot-1.6.10/test/sbuild-chroot.cc:102:13: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { sbuild::chroot::set_keyfile(chroot, keyfile, used_keys); } data/schroot-1.6.10/test/sbuild-chroot.cc:102:33: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. { sbuild::chroot::set_keyfile(chroot, keyfile, used_keys); } data/schroot-1.6.10/test/sbuild-chroot.cc:120:54: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_TEST_EXCEPTION(test_verbose_error, sbuild::chroot::error); data/schroot-1.6.10/test/sbuild-chroot.cc:161:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_list(*chroot.get(), data/schroot-1.6.10/test/sbuild-chroot.cc:163:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. &sbuild::chroot::get_groups, data/schroot-1.6.10/test/sbuild-chroot.cc:164:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. &sbuild::chroot::set_groups); data/schroot-1.6.10/test/sbuild-chroot.cc:174:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_list(*chroot.get(), data/schroot-1.6.10/test/sbuild-chroot.cc:176:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. &sbuild::chroot::get_root_groups, data/schroot-1.6.10/test/sbuild-chroot.cc:177:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. &sbuild::chroot::set_root_groups); data/schroot-1.6.10/test/sbuild-chroot.cc:186:16: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. test_list(*chroot.get(), data/schroot-1.6.10/test/sbuild-chroot.cc:188:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. &sbuild::chroot::get_aliases, data/schroot-1.6.10/test/sbuild-chroot.cc:189:24: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. &sbuild::chroot::set_aliases); data/schroot-1.6.10/test/sbuild-chroot.cc:223:10: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot, expected, group); data/schroot-1.6.10/test/sbuild-chroot.cc:252:79: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<basic_chroot> c = std::dynamic_pointer_cast<basic_chroot>(chroot); data/schroot-1.6.10/test/sbuild-chroot.cc:263:79: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<basic_chroot> c = std::dynamic_pointer_cast<basic_chroot>(chroot); data/schroot-1.6.10/test/sbuild-chroot.cc:265:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot->get_verbosity() == sbuild::chroot::VERBOSITY_QUIET); data/schroot-1.6.10/test/sbuild-chroot.cc:266:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. c->set_verbosity(sbuild::chroot::VERBOSITY_VERBOSE); data/schroot-1.6.10/test/sbuild-chroot.cc:267:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot->get_verbosity() == sbuild::chroot::VERBOSITY_VERBOSE); data/schroot-1.6.10/test/sbuild-chroot.cc:270:55: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(chroot->get_verbosity() == sbuild::chroot::VERBOSITY_NORMAL); data/schroot-1.6.10/test/sbuild-chroot.cc:276:79: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<basic_chroot> c = std::dynamic_pointer_cast<basic_chroot>(chroot); data/schroot-1.6.10/test/sbuild-chroot.cc:287:79: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. std::shared_ptr<basic_chroot> c = std::dynamic_pointer_cast<basic_chroot>(chroot); data/schroot-1.6.10/test/sbuild-chroot.cc:321:8: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. (chroot, expected, group); data/schroot-1.6.10/test/sbuild-chroot.cc:327:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::SESSION_CREATE); data/schroot-1.6.10/test/sbuild-chroot.cc:333:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. os << chroot; data/schroot-1.6.10/test/sbuild-chroot.cc:342:15: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. config << chroot; data/schroot-1.6.10/test/test-sbuild-chroot.h:50:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/test/test-sbuild-chroot.h:50:23: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot; data/schroot-1.6.10/test/test-sbuild-chroot.h:51:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr session; data/schroot-1.6.10/test/test-sbuild-chroot.h:52:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr source; data/schroot-1.6.10/test/test-sbuild-chroot.h:53:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr session_source; data/schroot-1.6.10/test/test-sbuild-chroot.h:55:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr chroot_union; data/schroot-1.6.10/test/test-sbuild-chroot.h:56:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr session_union; data/schroot-1.6.10/test/test-sbuild-chroot.h:57:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr source_union; data/schroot-1.6.10/test/test-sbuild-chroot.h:58:11: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. sbuild::chroot::ptr session_source_union; data/schroot-1.6.10/test/test-sbuild-chroot.h:65:5: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. chroot(), data/schroot-1.6.10/test/test-sbuild-chroot.h:78:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. this->chroot = sbuild::chroot::ptr(new T); data/schroot-1.6.10/test/test-sbuild-chroot.h:79:26: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. CPPUNIT_ASSERT(this->chroot); data/schroot-1.6.10/test/test-sbuild-chroot.h:82:30: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. setup_chroot_props(this->chroot); data/schroot-1.6.10/test/test-sbuild-chroot.h:136:34: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. this->chroot_union = sbuild::chroot::ptr(new T); data/schroot-1.6.10/test/test-sbuild-chroot.h:182:44: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/test-sbuild-chroot.h:182:57: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. virtual void setup_chroot_props (sbuild::chroot::ptr& chroot) data/schroot-1.6.10/test/test-sbuild-chroot.h:231:28: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. this->chroot = sbuild::chroot::ptr(); data/schroot-1.6.10/test/test-sbuild-chroot.h:430:31: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. void test_setup_env(sbuild::chroot::ptr& chroot, data/schroot-1.6.10/test/test-sbuild-chroot.h:430:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. void test_setup_env(sbuild::chroot::ptr& chroot, data/schroot-1.6.10/test/test-sbuild-chroot.h:515:35: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. void test_setup_keyfile(sbuild::chroot::ptr& chroot, data/schroot-1.6.10/test/test-sbuild-chroot.h:515:50: [3] (misc) chroot: chroot can be very helpful, but is hard to use correctly (CWE-250, CWE-22). Make sure the program immediately chdir("/"), closes file descriptors, and drops root privileges, and that all necessary files (and no more!) are in the new root. void test_setup_keyfile(sbuild::chroot::ptr& chroot, data/schroot-1.6.10/bin/schroot-mount/schroot-mount-main.cc:211:7: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[BUFSIZ]; data/schroot-1.6.10/doc/historical/sbuild-chroot-helper.c:197:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). int fd = open(file, O_RDONLY|O_NOFOLLOW); data/schroot-1.6.10/sbuild/sbuild-auth-pam-conv-tty.cc:223:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&noecho_termios, &orig_termios, sizeof(struct termios)); data/schroot-1.6.10/sbuild/sbuild-auth-pam-conv-tty.cc:234:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char input[PAM_MAX_MSG_SIZE]; data/schroot-1.6.10/sbuild/sbuild-chroot-config.cc:555:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). int fd = open(file.c_str(), O_RDONLY); data/schroot-1.6.10/sbuild/sbuild-chroot.cc:588:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). int fd = open(file.c_str(), O_CREAT|O_EXCL|O_WRONLY, 0664); data/schroot-1.6.10/sbuild/sbuild-ctty.cc:70:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). int ctty = open("/dev/tty", O_RDWR|O_NOCTTY); data/schroot-1.6.10/sbuild/sbuild-environment.cc:161:20: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char **ret = new char *[size() + 1]; data/schroot-1.6.10/sbuild/sbuild-mntstream.cc:72:3: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). open(file); data/schroot-1.6.10/sbuild/sbuild-mntstream.cc:82:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). mntstream::open(std::string const& file) data/schroot-1.6.10/sbuild/sbuild-mntstream.h:112:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void open(std::string const& file); data/schroot-1.6.10/sbuild/sbuild-run-parts.cc:253:7: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[BUFSIZ]; data/schroot-1.6.10/sbuild/sbuild-util.cc:242:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char uuid_str[37]; data/schroot-1.6.10/sbuild/sbuild-util.cc:340:3: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t wcbuf[80]; data/schroot-1.6.10/sbuild/sbuild-util.cc:387:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char cbuf[80]; data/schroot-1.6.10/sbuild/sbuild-util.cc:466:20: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char **ret = new char *[str.size() + 1]; data/schroot-1.6.10/test/sbuild-lock.cc:66:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). this->fd = open(TESTDATADIR "/filelock.ex1", O_RDWR|O_EXCL|O_CREAT, 0600); data/schroot-1.6.10/bin/schroot-mount/schroot-mount-main.cc:224:30: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if ((outdata = read(pollfd.fd, buffer, BUFSIZ)) < 0 data/schroot-1.6.10/sbuild/sbuild-auth-pam-conv-tty.cc:249:24: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). int nchars = read(CTTY_FILENO, input, PAM_MAX_MSG_SIZE - 1); data/schroot-1.6.10/sbuild/sbuild-mntstream.cc:95:3: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(); data/schroot-1.6.10/sbuild/sbuild-mntstream.cc:99:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). mntstream::read(int quantity) data/schroot-1.6.10/sbuild/sbuild-mntstream.cc:171:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(); // read a new entry data/schroot-1.6.10/sbuild/sbuild-mntstream.h:173:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). void read (int quantity=1); data/schroot-1.6.10/sbuild/sbuild-run-parts.cc:69:42: [1] (access) umask: Ensure that umask is given most restrictive possible setting (e.g., 066 or 077) (CWE-732). mode_t umask): data/schroot-1.6.10/sbuild/sbuild-run-parts.cc:72:3: [1] (access) umask: Ensure that umask is given most restrictive possible setting (e.g., 066 or 077) (CWE-732). umask(umask), data/schroot-1.6.10/sbuild/sbuild-run-parts.cc:72:9: [1] (access) umask: Ensure that umask is given most restrictive possible setting (e.g., 066 or 077) (CWE-732). umask(umask), data/schroot-1.6.10/sbuild/sbuild-run-parts.cc:209:17: [1] (access) umask: Ensure that umask is given most restrictive possible setting (e.g., 066 or 077) (CWE-732). ::umask(this->umask); data/schroot-1.6.10/sbuild/sbuild-run-parts.cc:209:29: [1] (access) umask: Ensure that umask is given most restrictive possible setting (e.g., 066 or 077) (CWE-732). ::umask(this->umask); data/schroot-1.6.10/sbuild/sbuild-run-parts.cc:269:30: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if ((errdata = read(pollfds[1].fd, buffer, BUFSIZ)) < 0 data/schroot-1.6.10/sbuild/sbuild-run-parts.cc:279:30: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if ((outdata = read(pollfds[0].fd, buffer, BUFSIZ)) < 0 data/schroot-1.6.10/sbuild/sbuild-run-parts.h:188:17: [1] (access) umask: Ensure that umask is given most restrictive possible setting (e.g., 066 or 077) (CWE-732). mode_t umask; ANALYSIS SUMMARY: Hits = 1376 Lines analyzed = 37062 in approximately 1.02 seconds (36413 lines/second) Physical Source Lines of Code (SLOC) = 21985 Hits@level = [0] 22 [1] 14 [2] 17 [3] 1341 [4] 4 [5] 0 Hits@level+ = [0+] 1398 [1+] 1376 [2+] 1362 [3+] 1345 [4+] 4 [5+] 0 Hits/KSLOC@level+ = [0+] 63.5888 [1+] 62.5881 [2+] 61.9513 [3+] 61.1781 [4+] 0.181942 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.