File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
python/ql/src/Security/CVE-2018-1281 Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -85,9 +85,9 @@ DataFlow::Node vulnerableAddressTuple(string hostname) {
85
85
*/
86
86
API:: Node socketInstance ( ) { result = API:: moduleImport ( "socket" ) .getMember ( "socket" ) .getReturn ( ) }
87
87
88
- from DataFlow:: CallCfgNode bindCall , DataFlow:: Node address , string hostname
88
+ from DataFlow:: CallCfgNode bindCall , DataFlow:: Node addressArg , string hostname
89
89
where
90
90
bindCall = socketInstance ( ) .getMember ( "bind" ) .getACall ( ) and
91
- address = bindCall .getArg ( 0 ) and
92
- address = vulnerableAddressTuple ( hostname )
91
+ addressArg = bindCall .getArg ( 0 ) and
92
+ addressArg = vulnerableAddressTuple ( hostname )
93
93
select bindCall .asExpr ( ) , "'" + hostname + "' binds a socket to all interfaces."
You can’t perform that action at this time.
0 commit comments