Coverity-CWE 22: Improper Limitation of a Pathname