Skip to content

Commit 032aa56

Browse files
committed
Ruby: add change note for system command execution sink bug
1 parent 6632dfa commit 032aa56

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* Fixed a bug causing every expression in the database to be a considered a system-command execution sink when calls to any of the following methods exist:
5+
* The `spawn", "fspawn", "popen4", "pspawn", "system", "_pspawn" methods and the backtick operator from the `POSIX::spawn` gem.
6+
* The `execute_command`, `rake`, `rails_command`, and `git` methods in `Rails::Generation::Actions`.

0 commit comments

Comments
 (0)