@0xabad1dea I'm agreeing via some of the hackernews info.
rawlog.c's use of gunzip leads to command injection and race condition.
tmpname1 = "/tmp/file.txt; rm -rf /";
could be a viable example.
Race condition to symlink tmpname2 to write to /etc/passwd, would be second viable example.
#opinions