FilesExpand file tree

 codeql-cli/latest

/

ExecUsed.ql

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

28 lines (24 loc) · 718 Bytes

 codeql-cli/latest

/

ExecUsed.ql

Top

File metadata and controls

• Code
• Blame

28 lines (24 loc) · 718 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

/**

* @name 'exec' used

* @description The 'exec' statement or function is used which could cause arbitrary code to be executed.

* @kind problem

* @tags security

* correctness

* @problem.severity error

* @security-severity 4.2

* @sub-severity high

* @precision low

* @id py/use-of-exec

*/

import python

string message() {

result = "The 'exec' statement is used." and major_version() = 2

or

result = "The 'exec' function is used." and major_version() = 3

}

predicate exec_function_call(Call c) {

exists(GlobalVariable exec | exec = c.getFunc().(Name).getVariable() and exec.getId() = "exec")

}

from AstNode exec

where exec_function_call(exec) or exec instanceof Exec

select exec, message()