On Monday, August 20, 2012 00:08:44 Sven Eckelmann wrote:

It is not necessary to call an external binary to clear the screen of a
default unix terminal emulator. The external call using system("clear")
may be used by an attacker to get untrusted code called with an higher
privilege because batctl has to be run as using uid 0.

Reported-by: Antonio Quartulli <redacted>
Signed-off-by: Sven Eckelmann <sven@narfation.org>
---
Add comment

 functions.c |    3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

Applied in revision f1fff52.

Thanks,
Marek