|
1 | 1 | edges
|
2 | 2 | | tests.cpp:26:15:26:23 | badSource indirection | tests.cpp:51:12:51:20 | call to badSource indirection |
|
3 |
| -| tests.cpp:26:32:26:35 | data indirection | tests.cpp:26:15:26:23 | badSource indirection | |
4 |
| -| tests.cpp:26:32:26:35 | data indirection | tests.cpp:38:25:38:36 | strncat output argument | |
5 | 3 | | tests.cpp:33:34:33:39 | call to getenv indirection | tests.cpp:38:39:38:49 | environment indirection |
|
6 | 4 | | tests.cpp:38:25:38:36 | strncat output argument | tests.cpp:26:15:26:23 | badSource indirection |
|
7 |
| -| tests.cpp:38:25:38:36 | strncat output argument | tests.cpp:26:15:26:23 | badSource indirection | |
8 |
| -| tests.cpp:38:25:38:36 | strncat output argument | tests.cpp:51:22:51:25 | badSource output argument | |
9 | 5 | | tests.cpp:38:39:38:49 | environment indirection | tests.cpp:38:25:38:36 | strncat output argument |
|
10 | 6 | | tests.cpp:51:12:51:20 | call to badSource indirection | tests.cpp:53:16:53:19 | data indirection |
|
11 |
| -| tests.cpp:51:22:51:25 | badSource output argument | tests.cpp:51:22:51:25 | data indirection | |
12 |
| -| tests.cpp:51:22:51:25 | data indirection | tests.cpp:26:32:26:35 | data indirection | |
13 |
| -| tests.cpp:51:22:51:25 | data indirection | tests.cpp:51:12:51:20 | call to badSource indirection | |
14 | 7 | nodes
|
15 | 8 | | tests.cpp:26:15:26:23 | badSource indirection | semmle.label | badSource indirection |
|
16 |
| -| tests.cpp:26:15:26:23 | badSource indirection | semmle.label | badSource indirection | |
17 |
| -| tests.cpp:26:32:26:35 | data indirection | semmle.label | data indirection | |
18 | 9 | | tests.cpp:33:34:33:39 | call to getenv indirection | semmle.label | call to getenv indirection |
|
19 | 10 | | tests.cpp:38:25:38:36 | strncat output argument | semmle.label | strncat output argument |
|
20 |
| -| tests.cpp:38:25:38:36 | strncat output argument | semmle.label | strncat output argument | |
21 | 11 | | tests.cpp:38:39:38:49 | environment indirection | semmle.label | environment indirection |
|
22 | 12 | | tests.cpp:51:12:51:20 | call to badSource indirection | semmle.label | call to badSource indirection |
|
23 |
| -| tests.cpp:51:22:51:25 | badSource output argument | semmle.label | badSource output argument | |
24 |
| -| tests.cpp:51:22:51:25 | data indirection | semmle.label | data indirection | |
25 | 13 | | tests.cpp:53:16:53:19 | data indirection | semmle.label | data indirection |
|
26 | 14 | subpaths
|
27 |
| -| tests.cpp:51:22:51:25 | data indirection | tests.cpp:26:32:26:35 | data indirection | tests.cpp:26:15:26:23 | badSource indirection | tests.cpp:51:12:51:20 | call to badSource indirection | |
28 | 15 | #select
|
29 | 16 | | tests.cpp:53:16:53:19 | data | tests.cpp:33:34:33:39 | call to getenv indirection | tests.cpp:53:16:53:19 | data indirection | This argument to an OS command is derived from $@, dangerously concatenated into $@, and then passed to system(string). | tests.cpp:33:34:33:39 | call to getenv indirection | user input (an environment variable) | tests.cpp:38:25:38:36 | strncat output argument | strncat output argument |
|
0 commit comments