@specs-feup/clava
Version:
A C/C++ source-to-source compiler written in Typescript
20 lines • 732 B
JavaScript
import { Call } from "../../../Joinpoints.js";
import Checker from "../Checker.js";
import CheckResult from "../CheckResult.js";
/**
* Check for the presence of chown functions
*/
export default class ChownChecker extends Checker {
advice = " This function uses paths to files, if an attacker can modify or move these files " +
" he can redirect the execution flow or create a race condition. Consider using fchown() instead (CWE-362).\n\n";
constructor() {
super("chown");
}
check($node) {
if (!($node instanceof Call) || $node.name !== "chown") {
return;
}
return new CheckResult(this.name, $node, this.advice);
}
}
//# sourceMappingURL=ChownChecker.js.map