hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Ruby/WeakFilePermissions

Browse Source
This commit is contained in:
Nora Dimitrijević
2025-10-14 14:24:40 +02:00
parent 495be51ae7
commit 6ede0a7950
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ruby/ql/src/queries/security/cwe-732/WeakFilePermissions.ql
View File

@@ -60,8 +60,9 @@ private module PermissivePermissionsConfig implements DataFlow::ConfigSig {
predicate observeDiffInformedIncrementalMode() { any() } predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSinkLocation(DataFlow::Node sink) { Location getASelectedSinkLocation(DataFlow::Node sink) {
exists(FileSystemPermissionModification mod | exists(FileSystemPermissionModification mod | sinkDef(sink, mod) |
sinkDef(sink, mod) and result = sink.getLocation()
or
result = mod.getLocation() result = mod.getLocation()
) )
} }