hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 22:32:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add sql.Tx.Exec/Query... support

Browse Source 
Ref: https://golang.org/pkg/database/sql/#Tx.ExecContext
This commit is contained in:
Ricter Zheng
2020-01-13 15:17:55 +08:00
committed by GitHub
parent 5985559161
commit a6e0dcaefc
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ql/src/semmle/go/frameworks/SQL.qll
View File

@@ -30,7 +30,10 @@ module SQL {
private class StandardQueryString extends Range {
StandardQueryString() {
exists(Method meth, string base, string m, int n |
meth.hasQualifiedName("database/sql", "DB", m) and
(
meth.hasQualifiedName("database/sql", "DB", m) or
meth.hasQualifiedName("database/sql", "Tx", m)
) and
this = meth.getACall().getArgument(n)
|
(base = "Exec" or base = "Prepare" or base = "Query" or base = "QueryRow") and