Add source wget.download

2026-04-30 11:15:13 +02:00 · 2022-12-13 15:34:01 +01:00
parent 2f68b54b27
commit 54109b8ea7
1 changed files with 5 additions and 0 deletions
--- a/python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql
+++ b/python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql
@@ -38,6 +38,11 @@ class UnsafeUnpackingConfig extends TaintTracking::Configuration {
    or
    // A source catching a S3 filename download
    exists(API::Node s3 | source = s3.getMember("download_file").getACall().getArg(2))
+    or
+    // A source download a file using wget
+    exists(MethodCallNode mcn |
+      mcn = API::moduleImport("wget").getMember("download").getACall() and source = mcn.getArg(1)
+    )
  }

  override predicate isSink(DataFlow::Node sink) {