Skip to content

Commit 4f9ffb3

Browse files
committed
C++: Set cpp/command-line-injection precision=low
This query is only appropriate for setuid programs. Since such programs are at most 0.1% of all code we analyse, I would say this query has a precision of at most 0.1%.
1 parent 6601327 commit 4f9ffb3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

cpp/ql/src/Security/CWE/CWE-078/ExecTainted.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
* to command injection.
66
* @kind problem
77
* @problem.severity error
8-
* @precision high
8+
* @precision low
99
* @id cpp/command-line-injection
1010
* @tags security
1111
* external/cwe/cwe-078

0 commit comments

Comments
 (0)