2 Commits

Author	SHA1	Message	Date
Rasmus Wriedt Larsen	7721db206e	Python: Don't double report paths for platform.popen and popen2.* ... I was a bit surprised that we hadn't double reported for popen2, but it turns out that the implementation (at least on unix) looks like: ``` def popen2(cmd, bufsize=-1, mode='t'): ... = Popen3(cmd, False, bufsize) ... ``` but since the modeling I did only considers calls to `Popen3` only if it has been imported from the `popen2` module, we don't consider that call as a sink.	2020-10-07 10:57:31 +02:00
Rasmus Wriedt Larsen	36812af2c2	Python: Add test for Python2 specific command injection	2020-10-07 10:54:03 +02:00