Skip to content

Commit dad9a02

Browse files
committed
Update TempDirInfoDisclosure with new OS Guards
1 parent 5913c9a commit dad9a02

File tree

4 files changed

+162
-122
lines changed

4 files changed

+162
-122
lines changed

java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.ql

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -118,6 +118,16 @@ private class IsWindowsBarrierGuard extends WindowsOsBarrierGuard instanceof IsW
118118
override predicate checks(Expr e, boolean branch) { this.controls(e.getBasicBlock(), branch) }
119119
}
120120

121+
private class IsAnyWindowsBarrierGuard extends WindowsOsBarrierGuard instanceof IsAnyWindowsGuard {
122+
override predicate checks(Expr e, boolean branch) {
123+
branch = true and this.controls(e.getBasicBlock(), branch)
124+
}
125+
}
126+
127+
/**
128+
* A taint tracking configuration tracking the access of the system temporary directory
129+
* flowing to the creation of files or directories.
130+
*/
121131
private class TempDirSystemGetPropertyToCreateConfig extends TaintTracking::Configuration {
122132
TempDirSystemGetPropertyToCreateConfig() { this = "TempDirSystemGetPropertyToCreateConfig" }
123133

0 commit comments

Comments
 (0)