hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix MongoEngine Sink

Browse Source
This commit is contained in:
jorgectf
2021-03-31 15:50:45 +02:00
parent ccd57bea7a
commit 01f9d4a1b0
1 changed files with 7 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
python/ql/src/experimental/semmle/python/frameworks/Stdlib.qll
View File

@@ -38,18 +38,17 @@ private module NoSQL {
override DataFlow::Node getQueryNode() { result = queryNode }
}
// `API::moduleImport("mongoengine").getMember("Document").getASubclass*().getACall()` doesn't point
// to our sinks
private class MongoEngineCall extends DataFlow::CallCfgNode, NoSQLQuery::Range {
DataFlow::Node queryNode;
MongoEngineCall() {
exists(DataFlow::AttrRead objectsMethod |
this.getFunction() = objectsMethod and
API::moduleImport("mongoengine").getMember("Document").getASubclass*().getACall() =
objectsMethod.getObject().getALocalSource() and
queryNode = this.getArg(0)
)
this =
API::moduleImport("mongoengine")
.getMember("Document")
.getASubclass()
.getMember("objects")
.getACall() and
queryNode = this.getArg(0)
}
override DataFlow::Node getQueryNode() { result = queryNode }