We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d86a0ab commit cf8fa83Copy full SHA for cf8fa83
cpp/ql/src/Security/CWE/CWE-367/TOCTOUFilesystemRace.ql
@@ -19,8 +19,10 @@ import semmle.code.cpp.controlflow.Guards
19
* An operation on a filename that is likely to modify the corresponding file
20
* and may return an indication of success.
21
*
22
- * Note: we're not interested in operations on file descriptors, as they
23
- * are better behaved.
+ * Note: we're not interested in operations where the file is specified by a
+ * descriptor, rather than a filename, as they are better behaved. We are
24
+ * interested in functions that take a filename and return a file descriptor,
25
+ * however.
26
*/
27
FunctionCall filenameOperation(Expr path) {
28
exists(string name | name = result.getTarget().getName() |
0 commit comments