Source-derived document; reported behaviour, inference and evidence gaps are identified in the text.
Return to: C09 — Security and Trust Boundaries — topic detail
command execution boundary
In this document
Security: command execution boundary
D4_Main.bang reads a user-entered command and passes it to Application.execute. The visible source shows no allowlist, validation, or sanitization before that call. This is a clear security-sensitive command-execution path and reasonably supports the risk characterization of user-supplied command execution. The exact permissions and behavior of Application.execute are not supplied, so the ultimate security impact remains framework-dependent. E0012
Harten documentation of the Informix 4GL and Java source repository, from the retained 17 October 2026 export. The exact upstream revision analysed is not established. Source findings do not establish runtime behaviour or equivalence between the implementations.
Evidence identifiers are retained for traceability. The underlying analysis records are not included in this public edition; credential values are redacted. About this case study.