hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 20:25:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

C++: Add a model for curl as well.

Browse Source
This commit is contained in:
Geoffrey White
2021-11-09 19:32:43 +00:00
parent 6388ac5f1d
commit ef21d1b512
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql
View File

@@ -60,6 +60,9 @@ class HttpStringToUrlOpenConfig extends TaintTracking::Configuration {
fc.getTarget().getName() = ["send", "URLDownloadToFile"] and
sink.asExpr() = fc.getArgument(1)
or
fc.getTarget().getName() = "curl_easy_setopt" and
sink.asExpr() = fc.getArgument(2)
or
fc.getTarget().getName() = "ShellExecute" and
sink.asExpr() = fc.getArgument(3)
)