hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Delete cve-2016-6480.ql

Browse Source 
commit by mistake
This commit is contained in:
4B5F5F4B
2022-03-17 09:49:28 +08:00
committed by GitHub
parent 2a29c201ff
commit d4c7314484
1 changed files with 0 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
cpp/ql/src/experimental/Security/CVE/cve-2016-6480.ql
View File

@@ -1,34 +0,0 @@
import cpp
class CopyFromUserFunctionCall extends FunctionCall{
CopyFromUserFunctionCall(){
this.getTarget().getName() = "copy_from_user"
and not this.getArgument(1) instanceof AddressOfExpr
}
predicate hasSameArguments(CopyFromUserFunctionCall another){
this.getArgument(0).toString() = another.getArgument(0).toString()
and this.getArgument(1).toString() = another.getArgument(1).toString()
}
}
from CopyFromUserFunctionCall p1, CopyFromUserFunctionCall p2
where
not p1 = p2
and p1.hasSameArguments(p2)
and exists(IfStmt ifStmt|
p1.getBasicBlock().getAFalseSuccessor*() = ifStmt.getBasicBlock()
and ifStmt.getBasicBlock().getAFalseSuccessor*() = p2.getBasicBlock()
)
and not exists(AssignPointerAddExpr assignPtrAdd |
p1.getArgument(1).toString() = assignPtrAdd.getLValue().toString()
and p1.getBasicBlock().getAFalseSuccessor*() = assignPtrAdd.getBasicBlock()
)
select
"first fetch", p1, "double fetch", p2