File tree Expand file tree Collapse file tree 2 files changed +5
-1
lines changed
powershell/ql/test/query-tests/security/cwe-078/CommandInjection Expand file tree Collapse file tree 2 files changed +5
-1
lines changed Original file line number Diff line number Diff line change 5353| test.ps1:170:36:170:41 | input | test.ps1:129:11:129:20 | userinput | provenance | |
5454| test.ps1:172:42:172:47 | input | test.ps1:136:11:136:20 | userinput | provenance | |
5555| test.ps1:173:42:173:47 | input | test.ps1:144:11:144:20 | userinput | provenance | |
56+ | test.ps1:214:10:214:32 | Call to read-host | test.ps1:217:7:217:10 | $o | provenance | Src:MaD:0 |
5657nodes
5758| test.ps1:3:11:3:20 | userinput | semmle.label | userinput |
5859| test.ps1:4:23:4:52 | Get-Process -Name $UserInput | semmle.label | Get-Process -Name $UserInput |
@@ -109,6 +110,8 @@ nodes
109110| test.ps1:170:36:170:41 | input | semmle.label | input |
110111| test.ps1:172:42:172:47 | input | semmle.label | input |
111112| test.ps1:173:42:173:47 | input | semmle.label | input |
113+ | test.ps1:214:10:214:32 | Call to read-host | semmle.label | Call to read-host |
114+ | test.ps1:217:7:217:10 | $o | semmle.label | $o |
112115subpaths
113116#select
114117| test.ps1:4:23:4:52 | Get-Process -Name $UserInput | test.ps1:152:10:152:32 | Call to read-host | test.ps1:4:23:4:52 | Get-Process -Name $UserInput | This command depends on a $@. | test.ps1:152:10:152:32 | Call to read-host | user-provided value |
@@ -129,3 +132,4 @@ subpaths
129132| test.ps1:131:28:131:37 | UserInput | test.ps1:152:10:152:32 | Call to read-host | test.ps1:131:28:131:37 | UserInput | This command depends on a $@. | test.ps1:152:10:152:32 | Call to read-host | user-provided value |
130133| test.ps1:139:50:139:59 | UserInput | test.ps1:152:10:152:32 | Call to read-host | test.ps1:139:50:139:59 | UserInput | This command depends on a $@. | test.ps1:152:10:152:32 | Call to read-host | user-provided value |
131134| test.ps1:147:63:147:72 | UserInput | test.ps1:152:10:152:32 | Call to read-host | test.ps1:147:63:147:72 | UserInput | This command depends on a $@. | test.ps1:152:10:152:32 | Call to read-host | user-provided value |
135+ | test.ps1:217:7:217:10 | $o | test.ps1:214:10:214:32 | Call to read-host | test.ps1:217:7:217:10 | $o | This command depends on a $@. | test.ps1:214:10:214:32 | Call to read-host | user-provided value |
Original file line number Diff line number Diff line change @@ -214,5 +214,5 @@ function false-positive-in-call-operator($d)
214214 $o = Read-Host " enter input"
215215 & unzip - o " $o " - d $d # GOOD
216216
217- . " $o " # BAD [NOT DETECTED]
217+ . " $o " # BAD
218218}
You can’t perform that action at this time.
0 commit comments