We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent aafa576 commit 5ef71e6Copy full SHA for 5ef71e6
cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql
@@ -62,7 +62,7 @@ class HttpStringToUrlOpenConfig extends TaintTracking::Configuration {
62
// accessed as a URL, for example using it in a network access. Some
63
// URLs are only ever displayed or used for data processing.
64
exists(FunctionCall fc |
65
- fc.getTarget().hasGlobalOrStdName(["system", "gethostbyname", "getaddrinfo"]) and
+ fc.getTarget().hasGlobalOrStdName(["system", "gethostbyname", "gethostbyname2", "gethostbyname_r", "getaddrinfo", "X509_load_http", "X509_CRL_load_http"]) and
66
sink.asExpr() = fc.getArgument(0)
67
or
68
fc.getTarget().hasGlobalOrStdName(["send", "URLDownloadToFile", "URLDownloadToCacheFile"]) and
0 commit comments