|
5 | 5 | | child_process-test.js:38:12:38:20 | '/bin/sh' | |
6 | 6 | | child_process-test.js:39:14:39:15 | sh | |
7 | 7 | | child_process-test.js:39:18:39:30 | [ flag, cmd ] | |
| 8 | +| child_process-test.js:39:18:39:30 | [ flag, cmd ] | |
8 | 9 | | child_process-test.js:41:9:41:17 | args | |
9 | 10 | | child_process-test.js:41:16:41:17 | [] | |
10 | 11 | | child_process-test.js:44:17:44:27 | "/bin/bash" | |
| 12 | +| child_process-test.js:44:17:44:27 | "/bin/bash" | |
11 | 13 | | child_process-test.js:44:30:44:33 | args | |
12 | 14 | | child_process-test.js:46:9:46:12 | "sh" | |
13 | 15 | | child_process-test.js:46:15:46:18 | args | |
14 | 16 | | child_process-test.js:48:9:48:17 | args | |
15 | 17 | | child_process-test.js:48:16:48:17 | [] | |
16 | 18 | | child_process-test.js:51:17:51:32 | `/bin` + "/bash" | |
| 19 | +| child_process-test.js:51:17:51:32 | `/bin` + "/bash" | |
17 | 20 | | child_process-test.js:51:35:51:38 | args | |
18 | 21 | | child_process-test.js:55:14:55:16 | cmd | |
19 | 22 | | child_process-test.js:55:19:55:22 | args | |
20 | 23 | | child_process-test.js:56:12:56:14 | cmd | |
21 | 24 | | child_process-test.js:56:17:56:20 | args | |
22 | 25 | | command-line-parameter-command-injection.js:4:10:4:21 | process.argv | |
| 26 | +| command-line-parameter-command-injection.js:4:10:4:21 | process.argv | |
23 | 27 | | command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | |
24 | 28 | | command-line-parameter-command-injection.js:8:22:8:33 | process.argv | |
25 | 29 | | command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | |
@@ -55,20 +59,25 @@ nodes |
55 | 59 | | command-line-parameter-command-injection.js:27:32:27:35 | args | |
56 | 60 | | command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | |
57 | 61 | | tst_shell-command-injection-from-environment.js:4:25:4:61 | ['-rf', ... temp")] | |
| 62 | +| tst_shell-command-injection-from-environment.js:4:25:4:61 | ['-rf', ... temp")] | |
58 | 63 | edges |
59 | 64 | | child_process-test.js:36:7:36:20 | sh | child_process-test.js:39:14:39:15 | sh | |
60 | 65 | | child_process-test.js:36:12:36:20 | 'cmd.exe' | child_process-test.js:36:7:36:20 | sh | |
61 | 66 | | child_process-test.js:38:7:38:20 | sh | child_process-test.js:39:14:39:15 | sh | |
62 | 67 | | child_process-test.js:38:12:38:20 | '/bin/sh' | child_process-test.js:38:7:38:20 | sh | |
| 68 | +| child_process-test.js:39:18:39:30 | [ flag, cmd ] | child_process-test.js:39:18:39:30 | [ flag, cmd ] | |
63 | 69 | | child_process-test.js:41:9:41:17 | args | child_process-test.js:44:30:44:33 | args | |
64 | 70 | | child_process-test.js:41:9:41:17 | args | child_process-test.js:46:15:46:18 | args | |
65 | 71 | | child_process-test.js:41:16:41:17 | [] | child_process-test.js:41:9:41:17 | args | |
| 72 | +| child_process-test.js:44:17:44:27 | "/bin/bash" | child_process-test.js:44:17:44:27 | "/bin/bash" | |
66 | 73 | | child_process-test.js:46:9:46:12 | "sh" | child_process-test.js:55:14:55:16 | cmd | |
67 | 74 | | child_process-test.js:46:15:46:18 | args | child_process-test.js:55:19:55:22 | args | |
68 | 75 | | child_process-test.js:48:9:48:17 | args | child_process-test.js:51:35:51:38 | args | |
69 | 76 | | child_process-test.js:48:16:48:17 | [] | child_process-test.js:48:9:48:17 | args | |
| 77 | +| child_process-test.js:51:17:51:32 | `/bin` + "/bash" | child_process-test.js:51:17:51:32 | `/bin` + "/bash" | |
70 | 78 | | child_process-test.js:55:14:55:16 | cmd | child_process-test.js:56:12:56:14 | cmd | |
71 | 79 | | child_process-test.js:55:19:55:22 | args | child_process-test.js:56:17:56:20 | args | |
| 80 | +| command-line-parameter-command-injection.js:4:10:4:21 | process.argv | command-line-parameter-command-injection.js:4:10:4:21 | process.argv | |
72 | 81 | | command-line-parameter-command-injection.js:8:22:8:33 | process.argv | command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | |
73 | 82 | | command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | |
74 | 83 | | command-line-parameter-command-injection.js:10:6:10:33 | args | command-line-parameter-command-injection.js:11:14:11:17 | args | |
@@ -100,6 +109,7 @@ edges |
100 | 109 | | command-line-parameter-command-injection.js:26:32:26:38 | args[0] | command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | |
101 | 110 | | command-line-parameter-command-injection.js:27:32:27:35 | args | command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | |
102 | 111 | | command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | |
| 112 | +| tst_shell-command-injection-from-environment.js:4:25:4:61 | ['-rf', ... temp")] | tst_shell-command-injection-from-environment.js:4:25:4:61 | ['-rf', ... temp")] | |
103 | 113 | #select |
104 | 114 | | command-line-parameter-command-injection.js:4:10:4:21 | process.argv | command-line-parameter-command-injection.js:4:10:4:21 | process.argv | command-line-parameter-command-injection.js:4:10:4:21 | process.argv | This command depends on an unsanitized $@. | command-line-parameter-command-injection.js:4:10:4:21 | process.argv | command-line argument | |
105 | 115 | | command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | command-line-parameter-command-injection.js:8:22:8:33 | process.argv | command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | This command depends on an unsanitized $@. | command-line-parameter-command-injection.js:8:22:8:33 | process.argv | command-line argument | |
|
0 commit comments