hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Improve Sanitizer calls

Browse Source
This commit is contained in:
jorgectf
2021-03-31 23:19:56 +02:00
parent 4328ff3981
commit 9b430310b4
1 changed files with 16 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
python/ql/src/experimental/semmle/python/frameworks/Stdlib.qll
View File

@@ -46,27 +46,21 @@ private module LDAP {
override string getLDAPPart() { result = ldapPart }
}
private class LDAP2EscapeDN extends DataFlow::CallCfgNode, LDAPEscape::Range {
DataFlow::Node escapeNode;
LDAP2EscapeDN() {
this = API::moduleImport("ldap").getMember("dn").getMember("escape_dn_chars").getACall() and
escapeNode = this.getArg(0)
private class LDAP2EscapeDNCall extends DataFlow::CallCfgNode, LDAPEscape::Range {
LDAP2EscapeDNCall() {
this = API::moduleImport("ldap").getMember("dn").getMember("escape_dn_chars").getACall()
}
override DataFlow::Node getEscapeNode() { result = escapeNode }
override DataFlow::Node getEscapeNode() { result = this.getArg(0) }
}
private class LDAP2EscapeFilter extends DataFlow::CallCfgNode, LDAPEscape::Range {
DataFlow::Node escapeNode;
LDAP2EscapeFilter() {
private class LDAP2EscapeFilterCall extends DataFlow::CallCfgNode, LDAPEscape::Range {
LDAP2EscapeFilterCall() {
this =
API::moduleImport("ldap").getMember("filter").getMember("escape_filter_chars").getACall() and
escapeNode = this.getArg(0)
API::moduleImport("ldap").getMember("filter").getMember("escape_filter_chars").getACall()
}
override DataFlow::Node getEscapeNode() { result = escapeNode }
override DataFlow::Node getEscapeNode() { result = this.getArg(0) }
}
}
@@ -100,36 +94,30 @@ private module LDAP {
override string getLDAPPart() { result = ldapPart }
}
private class LDAP3EscapeDN extends DataFlow::CallCfgNode, LDAPEscape::Range {
DataFlow::Node escapeNode;
LDAP3EscapeDN() {
private class LDAP3EscapeDNCall extends DataFlow::CallCfgNode, LDAPEscape::Range {
LDAP3EscapeDNCall() {
this =
API::moduleImport("ldap3")
.getMember("utils")
.getMember("dn")
.getMember("escape_rdn")
.getACall() and
escapeNode = this.getArg(0)
.getACall()
}
override DataFlow::Node getEscapeNode() { result = escapeNode }
override DataFlow::Node getEscapeNode() { result = this.getArg(0) }
}
private class LDAP3EscapeFilter extends DataFlow::CallCfgNode, LDAPEscape::Range {
DataFlow::Node escapeNode;
LDAP3EscapeFilter() {
private class LDAP3EscapeFilterCall extends DataFlow::CallCfgNode, LDAPEscape::Range {
LDAP3EscapeFilterCall() {
this =
API::moduleImport("ldap3")
.getMember("utils")
.getMember("conv")
.getMember("escape_filter_chars")
.getACall() and
escapeNode = this.getArg(0)
.getACall()
}
override DataFlow::Node getEscapeNode() { result = escapeNode }
override DataFlow::Node getEscapeNode() { result = this.getArg(0) }
}
}
}