            attrs: new Stats({
              mode: 0o644 | constants.S_IFREG,
              size: 513901992,
              uid: 9001,
              gid: 8001,
              atime: 1259972199,
              mtime: 1259972199
            })
          }
        ];
        server.on('READDIR', mustCall((id, handle) => {
          assert(id === 0, msg(`Wrong request id: ${id}`));
          assert.deepStrictEqual(handle, handle_, msg('handle mismatch'));
          server.name(id, list_);
          server.end();
        }));
        client.readdir(handle_, mustCall((err, list) => {
          assert(!err, msg(`Unexpected readdir() error: ${err}`));
          assert.deepStrictEqual(list,
                                 list_.slice(2),
                                 msg('dir list mismatch'));
        }));
      });
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.