hohn/codeql-dataflow-sql-injection
1
0
Fork 0
mirror of https://github.com/hohn/codeql-dataflow-sql-injection.git synced 2025-12-16 02:03:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Summary: sql injection: move source identification to configuration

Browse Source
This commit is contained in:
Michael Hohn
2020-07-20 14:10:36 -07:00
committed by =Michael Hohn
parent 42e2c5de8b
commit c91db6a653
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
SqlInjection.ql
View File

@@ -12,7 +12,12 @@ import semmle.code.cpp.dataflow.TaintTracking
class SqliFlowConfig extends TaintTracking::Configuration {
SqliFlowConfig() { this = "SqliFlow" }
override predicate isSource(DataFlow::Node source) { any() }
override predicate isSource(DataFlow::Node source) {
exists(FunctionCall read |
read.getTarget().getName() = "read" and
read.getArgument(1) = source.asExpr()
)
}
override predicate isSanitizer(DataFlow::Node sanitizer) { none() }