Fix CWE-78, Command built from user-controlled sources

[tiokim]

• Checking the command and args before running a native application

Signed-off-by: Taewan Kim t25.kim@samsung.com

Description

Fix CWE-78, Command built from user-controlled sources

Fixes #298

Type of change

• Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

Run TC

$ go test -v ./internal/controller/servicemgr/executor/nativeexecutor

Test Configuration:

• Firmware version: Ubuntu 20.04
• Hardware: x86-64
• Edge Orchestration Release: Coconut

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

[tiokim]

Close this PR since this code is not enough to resolve the issue.