hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Consider calls to setReadable(false, false) then setReadable(true, true) to be safe

Browse Source
This commit is contained in:
Jonathan Leitschuh
2022-02-08 17:57:10 -05:00
parent a6596ea7ce
commit 7f46640176
3 changed files with 68 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
java/ql/test/query-tests/security/CWE-200/semmle/tests/Test.java
View File

@@ -263,4 +263,10 @@ public class Test {
// TO MAKE SAFE REWRITE TO:
Files.createDirectories(tempDirChild.toPath(), PosixFilePermissions.asFileAttribute(EnumSet.of(PosixFilePermission.OWNER_READ, PosixFilePermission.OWNER_WRITE)));
}
void safeFileCreationWithPermissions() throws IOException {
File tempFile = File.createTempFile("temp", "file.txt");
tempFile.setReadable(false, false);
tempFile.setReadable(true, true);
}
}