Skip to content

Commit 2dad2c4

Browse files
authored
query description added
1 parent 85b2264 commit 2dad2c4

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

cpp/ql/src/experimental/Security/CVE/cve-2016-6480.ql

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,19 @@
1+
/**
2+
* @name Linux kernel double-fetch vulnerability detection
3+
* @description Double-fetch is a very common vulnerability pattern
4+
* in linux kernel, attacker can exploit double-fetch
5+
* issues to obatain root privilege.
6+
* Double-fetch is caused by fetching data from user
7+
* mode by calling copy_from_user twice, CVE-2016-6480
8+
* is quite a good example for your information.
9+
* @kind problem
10+
* @id cpp/linux-kernel-double-fetch-vulnerability
11+
* @problem.severity warning
12+
* @security-severity 7.5
13+
* @tags security
14+
* external/cwe/cwe-362
15+
*/
16+
117
import cpp
218

319
class CopyFromUserFunctionCall extends FunctionCall{

0 commit comments

Comments
 (0)