  { run: mustCall(function(msg) {
      this.onReady = mustCall((client, server) => {
        const path_ = '/tmp/foo.txt';
        const handle_ = Buffer.from('node.js');
        server.on('OPEN', mustCall((id, path, pflags, attrs) => {
          assert(id === 0, msg(`Wrong request id: ${id}`));
          assert(path === path_, msg(`Wrong path: ${path}`));
          assert(pflags === (OPEN_MODE.TRUNC
                             | OPEN_MODE.CREAT
                             | OPEN_MODE.WRITE),
                 msg(`Wrong flags: ${flagsToHuman(pflags)}`));
          server.handle(id, handle_);
          server.end();
        }));
        client.open(path_, 'w', mustCall((err, handle) => {
          assert(!err, msg('Unexpected open() error: ' + err));
          assert.deepStrictEqual(handle, handle_, msg('handle mismatch'));
        }));
      });
    }),
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.