hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Handle readline, readlines for ExternalFileObject

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2020-04-23 10:37:16 +02:00
parent 7385ea5024
commit 86630f1d6c
3 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/semmle/python/security/strings/External.qll
View File

@@ -191,7 +191,9 @@ class ExternalFileObject extends TaintKind {
TaintKind getValue() { result = valueKind }
override TaintKind getTaintOfMethodResult(string name) {
name = "read" and result = this.getValue()
name in ["read", "readline"] and result = this.getValue()
or
name = "readlines" and result.(SequenceKind).getItem() = this.getValue()
}
}