hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Polish LDAP3Query

Browse Source
This commit is contained in:
jorgectf
2021-04-08 22:56:12 +02:00
parent a1850ddad4
commit 8661cb0719
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
python/ql/src/experimental/semmle/python/frameworks/Stdlib.qll
View File

@@ -60,10 +60,6 @@ private module LDAP {
}
private module LDAP3 {
private class LDAP3QueryMethods extends string {
LDAP3QueryMethods() { this in ["search"] }
}
private class LDAP3Query extends DataFlow::CallCfgNode, LDAPQuery::Range {
DataFlow::Node ldapNode;
@@ -72,7 +68,7 @@ private module LDAP {
this.getFunction() = searchMethod and
API::moduleImport("ldap3").getMember("Connection").getACall() =
searchMethod.getObject().getALocalSource() and
searchMethod.getAttributeName() instanceof LDAP3QueryMethods and
searchMethod.getAttributeName() = "search" and
(
ldapNode = this.getArg(0) or
ldapNode = this.getArg(1)