Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
C
cwe_checker
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
fact-depend
cwe_checker
Commits
441362b5
Unverified
Commit
441362b5
authored
4 years ago
by
Enkelmann
Committed by
GitHub
4 years ago
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Fix formatting error (#127)
parent
7687036b
master
…
v0.7
v0.6
v0.5
No related merge requests found
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
7 additions
and
2 deletions
+7
-2
cwe_243.rs
cwe_checker_rs/src/checkers/cwe_243.rs
+7
-2
No files found.
cwe_checker_rs/src/checkers/cwe_243.rs
View file @
441362b5
...
...
@@ -148,8 +148,13 @@ pub fn check_cwe(
}
let
chroot_return_to_node
=
graph
.neighbors
(
node
)
.next
()
.unwrap
();
// If chdir is called after chroot, we assume a secure chroot jail.
if
is_sink_call_reachable_from_source_call
(
graph
,
chroot_return_to_node
,
&
chroot_tid
,
&
chdir_tid
)
.is_none
()
if
is_sink_call_reachable_from_source_call
(
graph
,
chroot_return_to_node
,
&
chroot_tid
,
&
chdir_tid
,
)
.is_none
()
{
// If chdir is not called after chroot, it has to be called before it.
// Additionally priviledges must be dropped to secure the chroot jail in this case.
...
...
This diff is collapsed.
Click to expand it.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment