Open
Description
pacemaker.c is full of popen
/system
calls. This are not very safe (escape of arguments, need to run shell, ...) and it would be better to use exec
and proper redirection (so stderr are split and could be logged). Another possibility might be to use some library instead of calling crm_ticket
(if such library exists).