qtil
advanced-security/qtil-java 0.0.3
Search

Predicate argumentToExec

Holds if e is an expression used as an argument to a call that executes an external command. For calls to varargs method calls, this only includes the first argument, which will be the command to be executed.

Import path

import semmle.code.java.security.ExternalProcess
predicate argumentToExec(Expr e, CommandInjectionSink s)