Skip to content

Commit e41d79e

Browse files
Add python cx_oracle, phoenixdb, pyodbc models
1 parent 7bcd247 commit e41d79e

File tree

6 files changed

+19
-0
lines changed

6 files changed

+19
-0
lines changed

python/ql/lib/semmle/python/Frameworks.qll

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ private import semmle.python.frameworks.Asyncpg
1212
private import semmle.python.frameworks.ClickhouseDriver
1313
private import semmle.python.frameworks.Cryptodome
1414
private import semmle.python.frameworks.Cryptography
15+
private import semmle.python.frameworks.Cx_Oracle
1516
private import semmle.python.frameworks.data.ModelsAsData
1617
private import semmle.python.frameworks.Dill
1718
private import semmle.python.frameworks.Django
@@ -34,10 +35,12 @@ private import semmle.python.frameworks.Multidict
3435
private import semmle.python.frameworks.Mysql
3536
private import semmle.python.frameworks.MySQLdb
3637
private import semmle.python.frameworks.Peewee
38+
private import semmle.python.frameworks.Phoenixdb
3739
private import semmle.python.frameworks.Psycopg2
3840
private import semmle.python.frameworks.Pycurl
3941
private import semmle.python.frameworks.Pydantic
4042
private import semmle.python.frameworks.PyMySQL
43+
private import semmle.python.frameworks.Pyodbc
4144
private import semmle.python.frameworks.Requests
4245
private import semmle.python.frameworks.RestFramework
4346
private import semmle.python.frameworks.Rsa

python/ql/lib/semmle/python/frameworks/Pyodbc.qll

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,11 @@
33
*
44
* See
55
* - https://github.com/mkleehammer/pyodbc/wiki
6+
<<<<<<< HEAD
67
* - https://pypi.org/project/pyodbc/
8+
=======
9+
* - https://pypi.org/project/pyodbc/
10+
>>>>>>> 5352eb77cc (Add python cx_oracle, phoenixdb, pyodbc models)
711
*/
812

913
private import python
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* Added model of `cx_Oracle`, `phonenixdb` and `pyodbc` PyPI packages as a SQL interface following PEP249, resulting in additional sinks for `py/sql-injection`.

python/ql/test/library-tests/frameworks/cx_Oracle/ConceptsTest.expected

Whitespace-only changes.
Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
import python
2+
import experimental.meta.ConceptsTest
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
import cx_Oracle
2+
connection = cx_Oracle.connect(user="hr", password="pwd",
3+
dsn="dbhost.example.com/orclpdb1")
4+
5+
cursor = connection.cursor()
6+
cursor.execute("some sql") # $ getSql="some sql"

0 commit comments

Comments
 (0)