From 19f4f86bfed21c5326ed2acebe1163f3a83e832b Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 6 May 2024 04:25:50 +0200 Subject: Adding upstream version 241. Signed-off-by: Daniel Baumann --- .lgtm/cpp-queries/fgets.ql | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .lgtm/cpp-queries/fgets.ql (limited to '.lgtm/cpp-queries/fgets.ql') diff --git a/.lgtm/cpp-queries/fgets.ql b/.lgtm/cpp-queries/fgets.ql new file mode 100644 index 0000000..a4181e4 --- /dev/null +++ b/.lgtm/cpp-queries/fgets.ql @@ -0,0 +1,21 @@ +/** + * @name Use of fgets() + * @description fgets() is dangerous to call. Use read_line() instead. + * @kind problem + * @problem.severity error + * @precision high + * @id cpp/fgets + * @tags reliability + * security + */ +import cpp + +predicate dangerousFunction(Function function) { + exists (string name | name = function.getQualifiedName() | + name = "fgets") +} + +from FunctionCall call, Function target +where call.getTarget() = target + and dangerousFunction(target) +select call, target.getQualifiedName() + " is potentially dangerous" -- cgit v1.2.3