hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python taint-tracking. Add an adapter for old 'dataflow config'.

Browse Source
This commit is contained in:
Mark Shannon
2019-08-29 14:30:09 +01:00
parent 179f4ee88f
commit e51b797c03
3 changed files with 90 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
python/ql/src/semmle/python/security/TaintTracking.qll
View File

@@ -705,6 +705,24 @@ module DataFlow {
}
private class ConfigurationAdapter extends TaintTracking::Configuration {
ConfigurationAdapter() {
this instanceof Configuration
}
override predicate isSource(DataFlow::Node node, TaintKind kind) {
this.(Configuration).isSource(node.asCfgNode()) and
kind instanceof DataFlowType
}
override predicate isSink(DataFlow::Node node, TaintKind kind) {
this.(Configuration).isSink(node.asCfgNode()) and
kind instanceof DataFlowType
}
}
private newtype TDataFlowNode =
TEssaNode(EssaVariable var)
or