Skip to content

C
cwe_checker
Unverified Commit 441362b5 by Enkelmann Committed by GitHub
Options

Fix formatting error (#127)

parent 7687036b
Showing with 7 additions and 2 deletions
cwe_checker_rs/src/checkers/cwe_243.rs
...@@ -148,8 +148,13 @@ pub fn check_cwe( ...@@ -148,8 +148,13 @@ pub fn check_cwe(
} }
let chroot_return_to_node = graph.neighbors(node).next().unwrap(); let chroot_return_to_node = graph.neighbors(node).next().unwrap();
// If chdir is called after chroot, we assume a secure chroot jail. // If chdir is called after chroot, we assume a secure chroot jail.
if is_sink_call_reachable_from_source_call(graph, chroot_return_to_node, &chroot_tid, &chdir_tid) if is_sink_call_reachable_from_source_call(
.is_none() graph,
chroot_return_to_node,
&chroot_tid,
&chdir_tid,
)
.is_none()
{ {
// If chdir is not called after chroot, it has to be called before it. // If chdir is not called after chroot, it has to be called before it.
// Additionally priviledges must be dropped to secure the chroot jail in this case. // Additionally priviledges must be dropped to secure the chroot jail in this case.
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment