hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 01:33:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
z80coder/query-pack-release-candidate-2
codeql/python/change-notes/2021-11-26-tempfile-file-access.md
Rasmus Wriedt Larsen cbd7434a7e Python: Add modeling of tempfile module
2021-11-29 15:08:36 +01:00

380 B
Raw Permalink Blame History

lgtm,codescanning

  • Added modeling of the tempfile module for creating temporary files and directories, such as the functions tempfile.NamedTemporaryFile and tempfile.TemporaryDirectory. The suffix, prefix, and dir arguments are all vulnerable to path-injection, and these are new sinks for the Uncontrolled data used in path expression (py/path-injection) query.