hohn/codeql-dataflow-sql-injection
1
0
Fork 0
mirror of https://github.com/hohn/codeql-dataflow-sql-injection.git synced 2025-12-16 18:23:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

minor

Browse Source
This commit is contained in:
Michael Hohn
2020-07-23 10:42:47 -07:00
committed by =Michael Hohn
parent 77fefdf78d
commit 9d130f1466
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
SqlInjection.ql
View File

@@ -34,8 +34,7 @@ class SqliFlowConfig extends TaintTracking::Configuration {
exists(FunctionCall printf | exists(FunctionCall printf |
printf.getTarget().getName().matches("%snprintf%") and printf.getTarget().getName().matches("%snprintf%") and
printf.getArgument(0) = out.(DataFlow::PostUpdateNode).getPreUpdateNode().asExpr() and printf.getArgument(0) = out.(DataFlow::PostUpdateNode).getPreUpdateNode().asExpr() and
// very specific: shifted index for macro. We can generalize this to consider // very specific: shifted index for macro.
// all trailing arguments as sources.
printf.getArgument(6) = into.asExpr() printf.getArgument(6) = into.asExpr()
) )
} }