github / github/codeql

false positive results of relativePath

Abierto
#4,883 1 comentario 0 reacciones 0 asignados Ver en GitHub
question
Lenguaje dominante
CodeQL
Estrellas
10.1k
Forks
2.1k
Merge medio
2 d 15 h
PR fusionados (30 d)
141

Descripción

**Description of the issue**

I have created a [query](https://lgtm.com/query/7170632202440898188/):

```
import java
import semmle.code.java.security.RelativePaths

from Expr e, string command
where relativePath(e, command)
select e, command
```

As the query [results](https://lgtm.com/projects/g/apache/maven/snapshot/151464c4c518e8790d7c17db311ee1ff13676f9b/files/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java?sort=name&dir=ASC&mode=heatmap#L43) of project :

![image](https://user-images.githubusercontent.com/12164075/103168228-5d111300-486c-11eb-9e8d-e1fb91850a93.png)

![image](https://user-images.githubusercontent.com/12164075/103168245-73b76a00-486c-11eb-9049-68d2a1129f69.png)

Obviously, `RELEASE_VERSION` does not start with a relative path as stated in `RelativePaths.qll`.

![image](https://user-images.githubusercontent.com/12164075/103168280-a6f9f900-486c-11eb-95e9-0e5e51d654f2.png)

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.