hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add QLdoc to TempDirUtils

Browse Source
This commit is contained in:
Jonathan Leitschuh
2021-03-22 16:40:46 -04:00
parent 7e55c92eb4
commit 66831989b7
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/src/Security/CWE/CWE-200/TempDirUtils.qll
View File

@@ -74,6 +74,9 @@ private predicate isTaintFollowingFileTransformation(Expr expSource, Expr exprDe
)
}
/**
* Holds if the system temporary directory is still part of the root of the file path.
*/
predicate isAdditionalFileTaintStep(DataFlow::Node node1, DataFlow::Node node2) {
isTaintedFileCreation(node1.asExpr(), node2.asExpr()) or
isTaintFollowingFileTransformation(node1.asExpr(), node2.asExpr())