os.Args variable read

egregius313 · egregius313 · commit 63a3054aeba6 · 2024-12-13T12:41:59.000-05:00
diff --git a/go/ql/lib/semmle/go/frameworks/stdlib/Os.qll b/go/ql/lib/semmle/go/frameworks/stdlib/Os.qll
@@ -43,4 +43,10 @@ module Os {
       input = inp and output = outp
     }
   }
+
+  private class ArgsSource extends SourceNode {
+    ArgsSource() { exists(Variable v | v.hasQualifiedName("os", "Args") | this = v.getARead()) }
+
+    override string getThreatModel() { result = "commandargs" }
+  }
 }

Original file line number	Diff line number	Diff line change
`@@ -43,4 +43,10 @@ module Os {`
`43`	`43`	`input = inp and output = outp`
`44`	`44`	`}`
`45`	`45`	`}`
	`46`	`+`
	`47`	`+ private class ArgsSource extends SourceNode {`
	`48`	`+ ArgsSource() { exists(Variable v \| v.hasQualifiedName("os", "Args") \| this = v.getARead()) }`
	`49`	`+`
	`50`	`+ override string getThreatModel() { result = "commandargs" }`
	`51`	`+ }`
`46`	`52`	`}`