[csharp] How to add step from a field set in a constructor to a field access in another method ? #19794
Replies: 1 comment 3 replies
-
|
Hi As long as you also have the code Sink sink = new Sink(taintedData);
sink.Run();in the database, then we should be able to detect the flow (ideally, we should also be able to detect it if not, but that is a current known limitation). You can try using partial flow, to debug where flow stops: https://codeql.github.com/docs/writing-codeql-queries/debugging-data-flow-queries-using-partial-flow/. |
Beta Was this translation helpful? Give feedback.
-
|
Hi, I actually have this code, here is a quick eval of I've used the ForwardPartialDataflow.ql query from here. It actually found the path that I want but not my query. Here is the quick eval of my
predicate isSink(DataFlow::Node sink) {
exists(Call c |
c.getTarget() instanceof DangerousMethod and (
sink.asExpr() = c.getARuntimeArgument()
)
)
} |
Beta Was this translation helpful? Give feedback.
-
|
Could you perhaps paste in the entire code example, as well as the entire query? |
Beta Was this translation helpful? Give feedback.
-
|
I feel dumb, I used code from another query to display the location in the result string but it doesn't not work in this case. It works now sorry and thank you for your time 👍 |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Hi, the title might no be super clear, I have this Sink class:
Where
Process.Start(...)will be defined inisSinkAnd here is the code calling it:
However my query doesn't show a path from
taintedDatatoProcess.Start(Command). Quick eval seems good for myisSourceandisSinkmethods, I tried to add anAdditionalTaintStepbut without success. How to follow this data ?Thank you :)
Beta Was this translation helpful? Give feedback.
All reactions