hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Improve sink

Browse Source
This commit is contained in:
jorgectf
2021-04-09 00:50:04 +02:00
parent 20fc5db49e
commit 2392be08c7
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
python/ql/src/experimental/semmle/python/security/LDAPImproperAuth.qll
View File

@@ -8,8 +8,15 @@ class LDAPImproperAuthSink extends DataFlow::Node {
LDAPImproperAuthSink() {
exists(LDAPBind ldapBind |
(
DataFlow::localFlow(DataFlow::exprNode(any(None noneName)), ldapBind.getPasswordNode()) or
not exists(ldapBind.getPasswordNode())
(
DataFlow::localFlow(DataFlow::exprNode(any(None noneName)), ldapBind.getPasswordNode()) or
not exists(ldapBind.getPasswordNode())
)
or
exists(StrConst emptyString |
emptyString.getText() = "" and
DataFlow::localFlow(DataFlow::exprNode(emptyString), ldapBind.getPasswordNode())
)
) and
this = ldapBind.getQueryNode()
)