hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-06 15:49:08 +01:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: Ql4QL fix

Browse Source
This commit is contained in:
Harry Maclean
2024-02-26 10:41:30 +00:00
parent beef9965cc
commit d1847566b6
2 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
ruby/ql/lib/codeql/ruby/frameworks/core/Kernel.qll
View File

@@ -135,11 +135,8 @@ module Kernel {
* spawn([env,] command... [,options]) -> pid
* ```
*/
class KernelSpawnCall extends SystemCommandExecution::Range instanceof DataFlow::CallNode {
KernelSpawnCall() {
this.getMethodName() = "spawn" and
this instanceof KernelMethodCall
}
class KernelSpawnCall extends SystemCommandExecution::Range instanceof KernelMethodCall {
KernelSpawnCall() { this.getMethodName() = "spawn" }
override DataFlow::Node getAnArgument() { result = super.getArgument(_) }

5
ruby/ql/lib/codeql/ruby/frameworks/stdlib/Open3.qll
View File

@@ -31,6 +31,11 @@ module Open3 {
}
}
/**
* A system command executed via one of the `Open4` methods.
* These methods take the same argument forms as `Kernel.system`.
* See `KernelSystemCall` for details.
*/
class Open4Call extends SystemCommandExecution::Range instanceof DataFlow::CallNode {
Open4Call() {
this = API::getTopLevelMember("Open4").getAMethodCall(["open4", "popen4", "spawn"])