hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

C++: Fix query formatting

Browse Source
This commit is contained in:
Jeroen Ketema
2023-03-07 18:55:58 +01:00
parent 2eb2e11ef7
commit 0c39d1e5ca
2 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
cpp/ql/src/Security/CWE/CWE-311/CleartextBufferWrite.ql
View File

@@ -56,10 +56,10 @@ predicate isSinkImpl(DataFlow::Node sink, SensitiveBufferWrite w) {
} }
from from
SensitiveBufferWrite w, ToBufferFlow::PathNode sourceNode, SensitiveBufferWrite w, ToBufferFlow::PathNode sourceNode, ToBufferFlow::PathNode sinkNode,
ToBufferFlow::PathNode sinkNode, FlowSource source FlowSource source
where where
ToBufferFlow::hasFlowPath(sourceNode, sinkNode) and ToBufferFlow::hasFlowPath(sourceNode, sinkNode) and
sourceNode.getNode() = source and sourceNode.getNode() = source and
isSinkImpl(sinkNode.getNode(), w) isSinkImpl(sinkNode.getNode(), w)
select w, sourceNode, sinkNode, select w, sourceNode, sinkNode,

6
cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql
View File

@@ -91,10 +91,8 @@ module HttpStringToUrlOpenConfig implements DataFlow::ConfigSig {
module HttpStringToUrlOpen = TaintTracking::Make<HttpStringToUrlOpenConfig>; module HttpStringToUrlOpen = TaintTracking::Make<HttpStringToUrlOpenConfig>;
from from HttpStringToUrlOpen::PathNode source, HttpStringToUrlOpen::PathNode sink, HttpStringLiteral str
HttpStringToUrlOpen::PathNode source, HttpStringToUrlOpen::PathNode sink,
HttpStringLiteral str
where where
HttpStringToUrlOpen::hasFlowPath(source, sink) and HttpStringToUrlOpen::hasFlowPath(source, sink) and
str = source.getNode().asIndirectExpr() str = source.getNode().asIndirectExpr()
select str, source, sink, "This URL may be constructed with the HTTP protocol." select str, source, sink, "This URL may be constructed with the HTTP protocol."