1. 5
  1.  

  2. 2

    Wow, that is just security 101. I was just reading about it the other day. Apart from the system call though, just converting from loose types (string for blink count) to strong types (int for blink count) first, we can then reason or validate it before passing it through to system (Or something safer) and obviously you can’t maliciously store a path in an int.