hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-30 14:52:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add Hash.Write and similar as sanitizers

Browse Source
This commit is contained in:
Owen Mansel-Chan
2020-06-16 12:48:43 +01:00
parent f27ecdabb8
commit 336eba1be4
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
ql/src/Security/CWE-640/EmailInjection.qll
View File

@@ -24,6 +24,19 @@ module EmailInjection {
override predicate isSource(DataFlow::Node source) { source instanceof Source }
override predicate isSanitizerOut(DataFlow::Node node) {
exists(DataFlow::CallNode call |
call.getTarget().hasQualifiedName("hash.Hash", "Write") and
(
call.getReceiver().getType().getName() = "Hash" or
call.getReceiver().getType().getName() = "Hash32" or
call.getReceiver().getType().getName() = "Hash64"
)
|
node = call.getArgument(0)
)
}
override predicate isSink(DataFlow::Node sink) { sink instanceof Sink }
}
}