func: static int stonesoup_ev_handler(struct mg_connection *conn, enum mg_event ev) char * ifmatch_header ; char * stonesoup_tainted_buff ; int buffer_size = 1000 ; if ( ev == MG_REQUEST )  ifmatch_header = ( char * ) mg_get_header ( conn , "if-match" ); if ( strcmp ( ifmatch_header , "weak_taint_source_value" ) == 0 )  while ( 1 )  stonesoup_tainted_buff = ( char * ) malloc ( buffer_size * sizeof ( char ) ); data_size = mg_get_var ( conn , "data" , stonesoup_tainted_buff , buffer_size * sizeof ( char ) ); if ( data_size < buffer_size )  buffer_size = buffer_size * 2; free ( stonesoup_tainted_buff ); stonesoup_handle_taint ( stonesoup_tainted_buff ); void stonesoup_handle_taint(char *aconitine_estimated) if ( aconitine_estimated != 0 )  aerobia_gmw = ( ( char * ) aconitine_estimated ); snprintf ( stonesoup_query_buffer , 1000 , "INSERT INTO Shippers (ShipperID, CompanyName) VALUES ('%d', '%s');" , stonesoup_random_int , aerobia_gmw ); tracepoint ( stonesoup_trace , variable_buffer , "stonesoup_query_buffer" , stonesoup_query_buffer , "CROSSOVER-STATE" ); if ( mysql_query ( stonesoup_conn , stonesoup_query_buffer ) )  if ( aconitine_estimated != 0 )  free ( ( ( char * ) aconitine_estimated ) ); 