mirror of
https://github.com/github/codeql.git
synced 2026-02-14 06:01:07 +01:00
18 lines
617 B
Plaintext
18 lines
617 B
Plaintext
import ruby
|
|
import codeql.ruby.frameworks.PosixSpawn
|
|
import codeql.ruby.DataFlow
|
|
|
|
query predicate systemCalls(
|
|
PosixSpawn::SystemCall call, DataFlow::Node arg, boolean shellInterpreted
|
|
) {
|
|
call.isShellInterpreted(arg) and shellInterpreted = true
|
|
or
|
|
not call.isShellInterpreted(arg) and arg = call.getAnArgument() and shellInterpreted = false
|
|
}
|
|
|
|
query predicate childCalls(PosixSpawn::ChildCall call, DataFlow::Node arg, boolean shellInterpreted) {
|
|
call.isShellInterpreted(arg) and shellInterpreted = true
|
|
or
|
|
not call.isShellInterpreted(arg) and arg = call.getAnArgument() and shellInterpreted = false
|
|
}
|