File tree Expand file tree Collapse file tree 3 files changed +6
-6
lines changed
Expand file tree Collapse file tree 3 files changed +6
-6
lines changed Original file line number Diff line number Diff line change @@ -6,20 +6,20 @@ import powershell
66import semmle.code.powershell.dataflow.DataFlow
77
88predicate defaultSource ( DataFlow:: Node src ) {
9- src .asExpr ( ) .getExpr ( ) .( CmdCall ) .getName ( ) = [ "Source" , "Taint" ]
9+ src .asExpr ( ) .getExpr ( ) .( CmdCall ) .matchesName ( [ "Source" , "Taint" ] )
1010 or
11- src .asParameter ( ) .getName ( ) . matches ( [ "Source%" , "Taint%" ] )
11+ src .asParameter ( ) .matchesName ( [ "Source%" , "Taint%" ] )
1212}
1313
1414predicate defaultSink ( DataFlow:: Node sink ) {
15- exists ( CmdCall cmd | cmd .getName ( ) = "Sink" | sink .asExpr ( ) .getExpr ( ) = cmd .getAnArgument ( ) )
15+ exists ( CmdCall cmd | cmd .matchesName ( "Sink" ) | sink .asExpr ( ) .getExpr ( ) = cmd .getAnArgument ( ) )
1616}
1717
1818string getSourceArgString ( DataFlow:: Node src ) {
1919 defaultSource ( src ) and
2020 (
2121 src .asExpr ( ) .getExpr ( ) .( CmdCall ) .getAnArgument ( ) .( StringConstExpr ) .getValue ( ) .getValue ( ) = result
2222 or
23- src .asParameter ( ) .getName ( ) .regexpCapture ( [ "Source (.+)" , "Taint (.+)" ] , 1 ) = result
23+ src .asParameter ( ) .getLowerCaseName ( ) .regexpCapture ( [ "source (.+)" , "taint (.+)" ] , 1 ) = result
2424 )
2525}
Original file line number Diff line number Diff line change @@ -2,4 +2,4 @@ import powershell
22
33query predicate positionalArguments ( Argument a , int p ) { p = a .getPosition ( ) }
44
5- query predicate namedArguments ( Argument a , string name ) { name = a .getName ( ) }
5+ query predicate namedArguments ( Argument a , string name ) { name = a .getLowerCaseName ( ) }
Original file line number Diff line number Diff line change @@ -14,7 +14,7 @@ module TypeTrackingTest implements TestSig {
1414 tag = "type" and
1515 n = trackInstance ( value , _) and
1616 isArgumentNode ( n , c , _) and
17- c .asCall ( ) .hasName ( "Sink" )
17+ c .asCall ( ) .matchesName ( "Sink" )
1818 )
1919 }
2020}
You can’t perform that action at this time.
0 commit comments