File tree Expand file tree Collapse file tree 2 files changed +7
-4
lines changed
go/ql/test/query-tests/Security/CWE-078 Expand file tree Collapse file tree 2 files changed +7
-4
lines changed Original file line number Diff line number Diff line change
1
+ #select
2
+ | StoredCommand.go:14:22:14:28 | cmdName | StoredCommand.go:11:2:11:27 | ... := ...[0] | StoredCommand.go:14:22:14:28 | cmdName | This command depends on a $@. | StoredCommand.go:11:2:11:27 | ... := ...[0] | stored value |
1
3
edges
2
4
| StoredCommand.go:11:2:11:27 | ... := ...[0] | StoredCommand.go:13:2:13:5 | rows | provenance | |
3
5
| StoredCommand.go:13:2:13:5 | rows | StoredCommand.go:13:12:13:19 | &... | provenance | FunctionModel |
4
6
| StoredCommand.go:13:12:13:19 | &... | StoredCommand.go:13:12:13:19 | &... | provenance | |
5
- | StoredCommand.go:13:12:13:19 | &... | StoredCommand.go:14:22:14:28 | cmdName | provenance | Sink:MaD:1305 |
7
+ | StoredCommand.go:13:12:13:19 | &... | StoredCommand.go:14:22:14:28 | cmdName | provenance | Sink:MaD:1 |
8
+ models
9
+ | 1 | Sink: os/exec; ; false; Command; ; ; Argument[0]; command-injection; manual |
6
10
nodes
7
11
| StoredCommand.go:11:2:11:27 | ... := ...[0] | semmle.label | ... := ...[0] |
8
12
| StoredCommand.go:13:2:13:5 | rows | semmle.label | rows |
9
13
| StoredCommand.go:13:12:13:19 | &... | semmle.label | &... |
10
14
| StoredCommand.go:14:22:14:28 | cmdName | semmle.label | cmdName |
11
15
subpaths
12
- #select
13
- | StoredCommand.go:14:22:14:28 | cmdName | StoredCommand.go:11:2:11:27 | ... := ...[0] | StoredCommand.go:14:22:14:28 | cmdName | This command depends on a $@. | StoredCommand.go:11:2:11:27 | ... := ...[0] | stored value |
Original file line number Diff line number Diff line change 1
- Security/CWE-078/StoredCommand.ql
1
+ query: Security/CWE-078/StoredCommand.ql
2
+ postprocess: TestUtilities/PrettyPrintModels.ql
You can’t perform that action at this time.
0 commit comments