|
1 | 1 | edges |
2 | 2 | | tests.cpp:26:15:26:23 | badSource indirection | tests.cpp:51:12:51:20 | call to badSource indirection | |
3 | | -| tests.cpp:26:32:26:35 | data indirection | tests.cpp:26:15:26:23 | badSource indirection | |
4 | | -| tests.cpp:26:32:26:35 | data indirection | tests.cpp:38:25:38:36 | strncat output argument | |
5 | 3 | | tests.cpp:33:34:33:39 | call to getenv indirection | tests.cpp:38:39:38:49 | environment indirection | |
6 | 4 | | tests.cpp:38:25:38:36 | strncat output argument | tests.cpp:26:15:26:23 | badSource indirection | |
7 | | -| tests.cpp:38:25:38:36 | strncat output argument | tests.cpp:26:15:26:23 | badSource indirection | |
8 | | -| tests.cpp:38:25:38:36 | strncat output argument | tests.cpp:51:22:51:25 | badSource output argument | |
9 | 5 | | tests.cpp:38:39:38:49 | environment indirection | tests.cpp:38:25:38:36 | strncat output argument | |
10 | 6 | | tests.cpp:51:12:51:20 | call to badSource indirection | tests.cpp:53:16:53:19 | data indirection | |
11 | | -| tests.cpp:51:22:51:25 | badSource output argument | tests.cpp:51:22:51:25 | data indirection | |
12 | | -| tests.cpp:51:22:51:25 | data indirection | tests.cpp:26:32:26:35 | data indirection | |
13 | | -| tests.cpp:51:22:51:25 | data indirection | tests.cpp:51:12:51:20 | call to badSource indirection | |
14 | 7 | nodes |
15 | 8 | | tests.cpp:26:15:26:23 | badSource indirection | semmle.label | badSource indirection | |
16 | | -| tests.cpp:26:15:26:23 | badSource indirection | semmle.label | badSource indirection | |
17 | | -| tests.cpp:26:32:26:35 | data indirection | semmle.label | data indirection | |
18 | 9 | | tests.cpp:33:34:33:39 | call to getenv indirection | semmle.label | call to getenv indirection | |
19 | 10 | | tests.cpp:38:25:38:36 | strncat output argument | semmle.label | strncat output argument | |
20 | | -| tests.cpp:38:25:38:36 | strncat output argument | semmle.label | strncat output argument | |
21 | 11 | | tests.cpp:38:39:38:49 | environment indirection | semmle.label | environment indirection | |
22 | 12 | | tests.cpp:51:12:51:20 | call to badSource indirection | semmle.label | call to badSource indirection | |
23 | | -| tests.cpp:51:22:51:25 | badSource output argument | semmle.label | badSource output argument | |
24 | | -| tests.cpp:51:22:51:25 | data indirection | semmle.label | data indirection | |
25 | 13 | | tests.cpp:53:16:53:19 | data indirection | semmle.label | data indirection | |
26 | 14 | subpaths |
27 | | -| tests.cpp:51:22:51:25 | data indirection | tests.cpp:26:32:26:35 | data indirection | tests.cpp:26:15:26:23 | badSource indirection | tests.cpp:51:12:51:20 | call to badSource indirection | |
28 | 15 | #select |
29 | 16 | | tests.cpp:53:16:53:19 | data | tests.cpp:33:34:33:39 | call to getenv indirection | tests.cpp:53:16:53:19 | data indirection | This argument to an OS command is derived from $@, dangerously concatenated into $@, and then passed to system(string). | tests.cpp:33:34:33:39 | call to getenv indirection | user input (an environment variable) | tests.cpp:38:25:38:36 | strncat output argument | strncat output argument | |
0 commit comments