hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 00:35:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

update stream pipe

Browse Source
This commit is contained in:
amammad
2023-06-28 00:09:39 +10:00
parent c7a7594821
commit 516fdf627a
1 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
javascript/ql/src/experimental/Security/CWE-522-DecompressionBombs/ReadableAdditionalStep.qll
View File

@@ -25,4 +25,30 @@ predicate readablePipeAdditionalTaintStep(DataFlow::Node pred, DataFlow::Node su
pred = cn.getParameter(0).asSink() and
succ = cn.getReturn().getMember("pipe").getParameter(0).asSink()
)
or
// this step connect the a pipe parameter to the next parameter
exists(API::Node cn, int i |
i in [0 .. 10] and
cn =
[
API::moduleImport("stream/promises").getMember("pipeline"),
API::moduleImport("stream").getMember("pipeline")
]
|
pred = cn.getParameter(i).asSink() and
succ = cn.getParameter(i + 1).asSink()
)
or
// this step connect the first pipe parameter to the next parameter
exists(API::Node cn, int i |
i in [1 .. 10] and
cn =
[
API::moduleImport("stream/promises").getMember("pipeline"),
API::moduleImport("stream").getMember("pipeline")
]
|
pred = cn.getParameter(0).asSink() and
succ = cn.getParameter(i).asSink()
)
}