mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
21 lines
413 B
TOML
21 lines
413 B
TOML
|
name = "split-sink-c"
|
||
|
|
language = "c_cpp"
|
||
|
|
frameworks = ["native"]
|
||
|
|
setup = []
|
||
|
|
modes = ["quick", "standard"]
|
||
|
|
known_noise = []
|
||
|
|
baselines = []
|
||
|
|
|
||
|
|
[source]
|
||
|
|
type = "local"
|
||
|
|
path = "../fixtures/split-sink-c"
|
||
|
|
|
||
|
|
[[expected]]
|
||
|
|
cwe = "CWE-89"
|
||
|
|
class = "sql injection"
|
||
|
|
path = "src/vuln.c"
|
||
|
|
line = 7
|
||
|
|
function = "search"
|
||
|
|
sink = "sqlite3_exec"
|
||
|
|
evidence = "sqlite3_exec runs a SQL query string built from attacker input on a prior line"
|