UNPKG

@specs-feup/clava

Version:

A C/C++ source-to-source compiler written in Typescript

20 lines 732 B
import { Call } from "../../../Joinpoints.js"; import Checker from "../Checker.js"; import CheckResult from "../CheckResult.js"; /** * Check for the presence of chown functions */ export default class ChownChecker extends Checker { advice = " This function uses paths to files, if an attacker can modify or move these files " + " he can redirect the execution flow or create a race condition. Consider using fchown() instead (CWE-362).\n\n"; constructor() { super("chown"); } check($node) { if (!($node instanceof Call) || $node.name !== "chown") { return; } return new CheckResult(this.name, $node, this.advice); } } //# sourceMappingURL=ChownChecker.js.map