...
Automated Detection
Compass/ROSE could catch violations of this rule by simply looking in a program's main() function. If that function uses setenv() or putenv(), and then refers to envp, it violates can detect violations of this rule.
Related Vulnerabilities
...