void RIL_setRilSocketName(const char * s) {
    strncpy(rild, s, MAX_SOCKET_NAME_LENGTH);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.