Skip to content

Commit ef21d1b

Browse files
committed
C++: Add a model for curl as well.
1 parent 6388ac5 commit ef21d1b

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,9 @@ class HttpStringToUrlOpenConfig extends TaintTracking::Configuration {
6060
fc.getTarget().getName() = ["send", "URLDownloadToFile"] and
6161
sink.asExpr() = fc.getArgument(1)
6262
or
63+
fc.getTarget().getName() = "curl_easy_setopt" and
64+
sink.asExpr() = fc.getArgument(2)
65+
or
6366
fc.getTarget().getName() = "ShellExecute" and
6467
sink.asExpr() = fc.getArgument(3)
6568
)

0 commit comments

Comments
 (0)