hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix getHost() (ldap.host = ip is not covered)

Browse Source
This commit is contained in:
Maiky
2023-08-03 16:37:48 +02:00
parent f7a662814d
commit fd649c1702
1 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
ruby/ql/lib/codeql/ruby/frameworks/Ldap.qll
View File

@@ -64,12 +64,11 @@ module NetLdap {
NetLdapBind() { this = l.getAMethodCall("bind") } NetLdapBind() { this = l.getAMethodCall("bind") }
override DataFlow::Node getHost() { override DataFlow::Node getHost() {
( result =
result = l.getKeywordArgument("encryption") [
or l.getKeywordArgument("host"), l.getAMethodCall("host").getArgument(0),
result = l.getAMethodCall("encryption").getArgument(0) l.getAMethodCall("host").getKeywordArgument("method")
) and ]
result.getConstantValue().isStringlikeValue(":simple_tls")
} }
override DataFlow::Node getPassword() { override DataFlow::Node getPassword() {