hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-19 08:23:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

allow the WeakFilePermissions access predicate to return multiple values

Browse Source
This commit is contained in:
Alex Ford
2021-05-13 13:22:14 +01:00
parent 0d1c4a1290
commit b2f2f786ac
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ql/src/queries/security/cwe-732/WeakFilePermissions.ql
View File

@@ -40,9 +40,7 @@ bindingset[p]
string access(int p) {
p.bitAnd(2) != 0 and result = "writable"
or
// report only the "most permissive" permission, i.e. report the file as
// readable only if it is not also writable
p.bitAnd(2) = 0 and p.bitAnd(4) != 0 and result = "readable"
p.bitAnd(4) != 0 and result = "readable"
}
/** An expression specifing a file permission that allows group/others read or write access */