hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 13:45:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: address review

Browse Source
This commit is contained in:
Rasmus Lerchedahl Petersen
2021-10-12 15:16:48 +02:00
parent aa91c26792
commit 6c108e43d9
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
python/ql/lib/semmle/python/frameworks/Stdlib.qll
View File

@@ -246,15 +246,16 @@ private module StdlibPrivate {
// Functions with non-standard arguments:
// - os.path.join(path, *paths)
// - os.path.relpath(path, start=os.curdir)
// Functions that need summaries:
// these functions need special treatment when computing `getPathArg`.
//
// Functions that excluded because they can act as sanitizers:
// - os.path.commonpath(paths): takes a sequence
// - os.path.commonprefix(list): takes a list argument
// - os.path.splitdrive: retunrs a tuple
// - os.path.splittext: returns a tuple
// unless the user control all arguments, we are comparing with a known value.
private string pathComputation() {
result in [
"abspath", "basename", "commonpath", "dirname", "expanduser", "expandvars", "join",
"normcase", "normpath", "realpath", "relpath", "split"
"normcase", "normpath", "realpath", "relpath", "split", "splitdrive", "splitext"
]
}