mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
47 lines
3.3 KiB
Plaintext
47 lines
3.3 KiB
Plaintext
nodes
|
|
| child_process-test.js:36:7:36:20 | sh |
|
|
| child_process-test.js:36:12:36:20 | 'cmd.exe' |
|
|
| child_process-test.js:38:7:38:20 | sh |
|
|
| child_process-test.js:38:12:38:20 | '/bin/sh' |
|
|
| child_process-test.js:39:14:39:15 | sh |
|
|
| child_process-test.js:39:18:39:30 | [ flag, cmd ] |
|
|
| child_process-test.js:41:9:41:17 | args |
|
|
| child_process-test.js:41:16:41:17 | [] |
|
|
| child_process-test.js:44:17:44:27 | "/bin/bash" |
|
|
| child_process-test.js:44:30:44:33 | args |
|
|
| child_process-test.js:46:9:46:12 | "sh" |
|
|
| child_process-test.js:46:15:46:18 | args |
|
|
| child_process-test.js:48:9:48:17 | args |
|
|
| child_process-test.js:48:16:48:17 | [] |
|
|
| child_process-test.js:51:17:51:32 | `/bin` + "/bash" |
|
|
| child_process-test.js:51:35:51:38 | args |
|
|
| child_process-test.js:55:14:55:16 | cmd |
|
|
| child_process-test.js:55:19:55:22 | args |
|
|
| child_process-test.js:56:12:56:14 | cmd |
|
|
| child_process-test.js:56:17:56:20 | args |
|
|
| tst_shell-command-injection-from-environment.js:4:25:4:61 | ['-rf', ... temp")] |
|
|
| tst_shell-command-injection-from-environment.js:5:14:5:53 | 'rm -rf ... "temp") |
|
|
| tst_shell-command-injection-from-environment.js:5:26:5:53 | path.jo ... "temp") |
|
|
| tst_shell-command-injection-from-environment.js:5:36:5:44 | __dirname |
|
|
edges
|
|
| child_process-test.js:36:7:36:20 | sh | child_process-test.js:39:5:39:5 | sh |
|
|
| child_process-test.js:36:7:36:20 | sh | child_process-test.js:39:14:39:15 | sh |
|
|
| child_process-test.js:36:12:36:20 | 'cmd.exe' | child_process-test.js:36:7:36:20 | sh |
|
|
| child_process-test.js:38:7:38:20 | sh | child_process-test.js:39:5:39:5 | sh |
|
|
| child_process-test.js:38:7:38:20 | sh | child_process-test.js:39:14:39:15 | sh |
|
|
| child_process-test.js:38:12:38:20 | '/bin/sh' | child_process-test.js:38:7:38:20 | sh |
|
|
| child_process-test.js:39:5:39:5 | sh | child_process-test.js:39:14:39:15 | sh |
|
|
| child_process-test.js:41:9:41:17 | args | child_process-test.js:44:30:44:33 | args |
|
|
| child_process-test.js:41:9:41:17 | args | child_process-test.js:46:15:46:18 | args |
|
|
| child_process-test.js:41:16:41:17 | [] | child_process-test.js:41:9:41:17 | args |
|
|
| child_process-test.js:46:9:46:12 | "sh" | child_process-test.js:55:14:55:16 | cmd |
|
|
| child_process-test.js:46:15:46:18 | args | child_process-test.js:55:19:55:22 | args |
|
|
| child_process-test.js:48:9:48:17 | args | child_process-test.js:51:35:51:38 | args |
|
|
| child_process-test.js:48:16:48:17 | [] | child_process-test.js:48:9:48:17 | args |
|
|
| child_process-test.js:55:14:55:16 | cmd | child_process-test.js:56:12:56:14 | cmd |
|
|
| child_process-test.js:55:19:55:22 | args | child_process-test.js:56:17:56:20 | args |
|
|
| tst_shell-command-injection-from-environment.js:5:26:5:53 | path.jo ... "temp") | tst_shell-command-injection-from-environment.js:5:14:5:53 | 'rm -rf ... "temp") |
|
|
| tst_shell-command-injection-from-environment.js:5:36:5:44 | __dirname | tst_shell-command-injection-from-environment.js:5:26:5:53 | path.jo ... "temp") |
|
|
#select
|
|
| tst_shell-command-injection-from-environment.js:5:14:5:53 | 'rm -rf ... "temp") | tst_shell-command-injection-from-environment.js:5:36:5:44 | __dirname | tst_shell-command-injection-from-environment.js:5:14:5:53 | 'rm -rf ... "temp") | This shell command depends on an uncontrolled $@. | tst_shell-command-injection-from-environment.js:5:36:5:44 | __dirname | absolute path |
|