func: static int stonesoup_ev_handler(struct mg_connection *conn, enum mg_event ev) char * ifmatch_header ; char * stonesoup_tainted_buff ; int buffer_size = 1000 ; if ( ev == MG_REQUEST )  ifmatch_header = ( char * ) mg_get_header ( conn , "if-match" ); if ( strcmp ( ifmatch_header , "weak_taint_source_value" ) == 0 )  while ( 1 )  stonesoup_tainted_buff = ( char * ) malloc ( buffer_size * sizeof ( char ) ); data_size = mg_get_var ( conn , "data" , stonesoup_tainted_buff , buffer_size * sizeof ( char ) ); if ( data_size < buffer_size )  buffer_size = buffer_size * 2; stonesoup_handle_taint ( stonesoup_tainted_buff ); void stonesoup_handle_taint(char *aconitine_estimated) MYSQL * stonesoup_conn ; char stonesoup_use_str [ 150 ] = { 0 } ; if ( aconitine_estimated != 0 )  stonesoup_dbhost = getenv ( "DBMYSQLHOST" ); stonesoup_dbuser = getenv ( "DBMYSQLUSER" ); stonesoup_dbpassword = getenv ( "DBMYSQLPASSWORD" ); stonesoup_dbport = ( ( unsigned int ) ( strtoul ( getenv ( "DBMYSQLPORT" ) , 0 , 10 ) ) ); stonesoup_dbdatabase = getenv ( "SS_DBMYSQLDATABASE" ); if ( stonesoup_dbhost != 0 && stonesoup_dbport != 0 && ( stonesoup_dbuser != 0 && stonesoup_dbpassword != 0 ) )  stonesoup_conn = mysql_init ( 0 ); if ( stonesoup_conn != 0 )  if ( mysql_real_connect ( stonesoup_conn , stonesoup_dbhost , stonesoup_dbuser , stonesoup_dbpassword , 0 , stonesoup_dbport , "/var/lib/mysql/mysql.sock" , 65536UL ) != 0 )  snprintf ( stonesoup_use_str , 150 , "USE %s;" , stonesoup_dbdatabase ); if ( mysql_query ( stonesoup_conn , stonesoup_use_str ) == 0 )  srand ( time ( NULL ) ); 