René's URL Explorer Experiment


Title: Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerability by JLLeitschuh · Pull Request #4473 · github/codeql · GitHub

Open Graph Title: Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerability by JLLeitschuh · Pull Request #4473 · github/codeql

X Title: Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerability by JLLeitschuh · Pull Request #4473 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerability by JLLeitschuh · Pull Request #4473 · github/codeql

Open Graph Description: On Unix-like systems, the temporary directory is shared with all users on the system. As such, improperly writing to the system temporary directory can allow attackers to hijack temporary directory...

X Description: On Unix-like systems, the temporary directory is shared with all users on the system. As such, improperly writing to the system temporary directory can allow attackers to hijack temporary directory...

Opengraph URL: https://github.com/github/codeql/pull/4473

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:4141cacd-e464-04f1-66cd-fe0a39f42b5e
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idA134:57E99:2E550D:3EF00C:6A4D5B2D
html-safe-nonce2bd5df5e920e4fc5b71227a89a775c3d01982c26edade6c83491c1bed54ad0f0
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBMTM0OjU3RTk5OjJFNTUwRDozRUYwMEM6NkE0RDVCMkQiLCJ2aXNpdG9yX2lkIjoiMjQ3MjU3MDA5ODA3OTg0OTI2MSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacd77d7b947ae9c66a86625237bcd5722fb0341dedc3dd2ce779938e8424074840
hovercard-subject-tagpull_request:503379043
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/4473/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/9c3a8e26aabf3b073da2e203c42424e52a1a7fd8f4213eb69784148f32e5fcd6/github/codeql/pull/4473
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/9c3a8e26aabf3b073da2e203c42424e52a1a7fd8f4213eb69784148f32e5fcd6/github/codeql/pull/4473
og:image:altOn Unix-like systems, the temporary directory is shared with all users on the system. As such, improperly writing to the system temporary directory can allow attackers to hijack temporary directory...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameJLLeitschuh
hostnamegithub.com
expected-hostnamegithub.com
None2a1443ff9733a3016431263ea73c93d8fe00c195eb4a7670ac30e7848f045441
turbo-cache-controlno-cache
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasef3bdd3157ea1f0fd738d408eceeead721acf1dc3
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/4473/#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4473%2F
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4473%2F
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/4473/
Reloadhttps://github.com/github/codeql/pull/4473/
Reloadhttps://github.com/github/codeql/pull/4473/
Please reload this pagehttps://github.com/github/codeql/pull/4473/
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 988 https://github.com/github/codeql/issues
Pull requests 424 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
JLLeitschuhhttps://github.com/JLLeitschuh
github:mainhttps://github.com/github/codeql/tree/main
JLLeitschuh:feat/JLL/java/CWE-378https://github.com/JLLeitschuh/ql/tree/feat/JLL/java/CWE-378
Conversationhttps://github.com/github/codeql/pull/4473
Commits29 (29)https://github.com/github/codeql/pull/4473/commits
Checkshttps://github.com/github/codeql/pull/4473/checks
Files changedhttps://github.com/github/codeql/pull/4473/files
Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerabilityhttps://github.com/github/codeql/pull/4473/#top
JLLeitschuhhttps://github.com/JLLeitschuh
github:mainhttps://github.com/github/codeql/tree/main
JLLeitschuh:feat/JLL/java/CWE-378https://github.com/JLLeitschuh/ql/tree/feat/JLL/java/CWE-378
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Oct 14, 2020https://github.com/github/codeql/pull/4473/#issue-721465796
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Java https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava
Oct 14, 2020https://github.com/github/codeql/pull/4473/#event-3876629197
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Oct 16, 2020https://github.com/github/codeql/pull/4473/#issuecomment-709650373
https://cwe.mitre.org/data/definitions/379.htmlhttps://cwe.mitre.org/data/definitions/379.html
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/Marcono1234
Marcono1234https://github.com/Marcono1234
Oct 17, 2020https://github.com/github/codeql/pull/4473/#issuecomment-711026361
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java.nio.file.Files.createDirectories(...)https://docs.oracle.com/en/java/javase/15/docs/api/java.base/java/nio/file/Files.html#createDirectories(java.nio.file.Path,java.nio.file.attribute.FileAttribute...)
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/smowton
smowtonhttps://github.com/smowton
Oct 20, 2020https://github.com/github/codeql/pull/4473/#event-3899497311
https://github.com/smowton
smowtonhttps://github.com/smowton
Oct 20, 2020 https://github.com/github/codeql/pull/4473/#pullrequestreview-512879947
View reviewed changes https://github.com/github/codeql/pull/4473/files
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qlhttps://github.com/github/codeql/pull/4473/files#diff-83804d76b24d0fe2fe4643a63bf4d673fc6b881d223d9f49d0a498cf6b41b7b9
smowtonhttps://github.com/smowton
Oct 20, 2020https://github.com/github/codeql/pull/4473/#discussion_r508630647
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
JLLeitschuhhttps://github.com/JLLeitschuh
Oct 20, 2020https://github.com/github/codeql/pull/4473/#discussion_r508713974
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qlhttps://github.com/github/codeql/pull/4473/files#diff-83804d76b24d0fe2fe4643a63bf4d673fc6b881d223d9f49d0a498cf6b41b7b9
smowtonhttps://github.com/smowton
Oct 20, 2020https://github.com/github/codeql/pull/4473/#discussion_r508632565
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
JLLeitschuhhttps://github.com/JLLeitschuh
Oct 20, 2020https://github.com/github/codeql/pull/4473/#discussion_r508712871
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
https://ghsecuritylab.slack.com/archives/CQJU6RN49/p1602785245063800https://ghsecuritylab.slack.com/archives/CQJU6RN49/p1602785245063800
Please reload this pagehttps://github.com/github/codeql/pull/4473/
smowtonhttps://github.com/smowton
Oct 21, 2020https://github.com/github/codeql/pull/4473/#discussion_r509171494
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
https://github.com/github/codeql/blob/main/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql#L21https://github.com/github/codeql/blob/main/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql#L21
Please reload this pagehttps://github.com/github/codeql/pull/4473/
aschackmullhttps://github.com/aschackmull
Mar 24, 2021https://github.com/github/codeql/pull/4473/#discussion_r600282128
Please reload this pagehttps://github.com/github/codeql/pull/4473/
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
aschackmullhttps://github.com/aschackmull
Mar 24, 2021https://github.com/github/codeql/pull/4473/#discussion_r600285525
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
JLLeitschuhhttps://github.com/JLLeitschuh
Jan 19, 2022https://github.com/github/codeql/pull/4473/#discussion_r788079352
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
aschackmullhttps://github.com/aschackmull
Jan 24, 2022https://github.com/github/codeql/pull/4473/#discussion_r790598030
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
#7698https://github.com/github/codeql/pull/7698
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Oct 20, 2020https://github.com/github/codeql/pull/4473/#issuecomment-713025034
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/Marcono1234
Marcono1234https://github.com/Marcono1234
Nov 2, 2020https://github.com/github/codeql/pull/4473/#issuecomment-720481370
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Nov 10, 2020https://github.com/github/codeql/pull/4473/#issuecomment-724933487
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Jan 1, 2021 https://github.com/github/codeql/pull/4473/#pullrequestreview-560611756
View reviewed changes https://github.com/github/codeql/pull/4473/files
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qlhttps://github.com/github/codeql/pull/4473/files#diff-83804d76b24d0fe2fe4643a63bf4d673fc6b881d223d9f49d0a498cf6b41b7b9
JLLeitschuhhttps://github.com/JLLeitschuh
Jan 1, 2021https://github.com/github/codeql/pull/4473/#discussion_r550821082
Please reload this pagehttps://github.com/github/codeql/pull/4473/
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
JLLeitschuhhttps://github.com/JLLeitschuh
Jan 24, 2022https://github.com/github/codeql/pull/4473/#discussion_r790985466
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Jan 2, 2021 https://github.com/github/codeql/pull/4473/#ref-pullrequest-777383072
Add MethodAccessSystemGetProperty predicate #4898 https://github.com/github/codeql/pull/4898
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
force-pushedhttps://github.com/github/codeql/compare/d153907efe8f2bb28390550997c6e6976fd87117..f5dfc81ba8fe367a0e26cac83af942e0f13f0a56
d153907https://github.com/github/codeql/commit/d153907efe8f2bb28390550997c6e6976fd87117
f5dfc81https://github.com/github/codeql/commit/f5dfc81ba8fe367a0e26cac83af942e0f13f0a56
Compare https://github.com/github/codeql/compare/d153907efe8f2bb28390550997c6e6976fd87117..f5dfc81ba8fe367a0e26cac83af942e0f13f0a56
January 19, 2022 16:58https://github.com/github/codeql/pull/4473/#event-5919181921
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Jan 20, 2022https://github.com/github/codeql/pull/4473/#event-5921292264
https://github.com/trgpa
trgpahttps://github.com/trgpa
Feb 4, 2022https://github.com/github/codeql/pull/4473/#issuecomment-1030416237
spring-projects/spring-boot@667ccdahttps://github.com/spring-projects/spring-boot/commit/667ccdae84822072f9ea1a27ed5c77964c71002d
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Feb 7, 2022https://github.com/github/codeql/pull/4473/#issuecomment-1031779145
@trungPahttps://github.com/trungPa
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Feb 7, 2022https://github.com/github/codeql/pull/4473/#issuecomment-1031809240
@trungPahttps://github.com/trungPa
GHSA-cm59-pr5q-cw85https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/trgpa
trgpahttps://github.com/trgpa
Feb 7, 2022https://github.com/github/codeql/pull/4473/#issuecomment-1031930443
@JLLeitschuhhttps://github.com/JLLeitschuh
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
force-pushedhttps://github.com/github/codeql/compare/d4739a2fb4c276bb7363bda02b4b08b10d77d612..fee9c41446222785367b6a4577366737b50fa397
d4739a2https://github.com/github/codeql/commit/d4739a2fb4c276bb7363bda02b4b08b10d77d612
fee9c41https://github.com/github/codeql/commit/fee9c41446222785367b6a4577366737b50fa397
Compare https://github.com/github/codeql/compare/d4739a2fb4c276bb7363bda02b4b08b10d77d612..fee9c41446222785367b6a4577366737b50fa397
February 14, 2022 23:50https://github.com/github/codeql/pull/4473/#event-6070984767
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
March 15, 2022 22:19https://github.com/github/codeql/pull/4473/#event-6246786627
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
code ownerhttps://github.com/github/codeql/blob/b45f56ac08dd60cf53b2a873b74eb6ec44ef20e7/CODEOWNERS#L3
March 15, 2022 22:19https://github.com/github/codeql/pull/4473/#event-6246786638
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
aschackmullhttps://github.com/aschackmull
smowtonhttps://github.com/smowton
March 15, 2022 22:19https://github.com/github/codeql/pull/4473/#event-6246788603
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 15, 2022https://github.com/github/codeql/pull/4473/#issuecomment-1068523470
#8032https://github.com/github/codeql/pull/8032
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/Marcono1234
Marcono1234https://github.com/Marcono1234
Mar 15, 2022 https://github.com/github/codeql/pull/4473/#pullrequestreview-910912828
View reviewed changes https://github.com/github/codeql/pull/4473/files
Marcono1234https://github.com/Marcono1234
https://github.com/github/codeql/pull/4473/#pullrequestreview-910912828
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qhelphttps://github.com/github/codeql/pull/4473/files#diff-9bb2edbea314e232ee82e413e12b4d3babfa3d18648020e7ed50da275fd10aa3
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qhelphttps://github.com/github/codeql/pull/4473/files#diff-9bb2edbea314e232ee82e413e12b4d3babfa3d18648020e7ed50da275fd10aa3
Marcono1234https://github.com/Marcono1234
Mar 15, 2022https://github.com/github/codeql/pull/4473/#discussion_r827479410
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
this commenthttps://github.com/github/codeql/pull/4473/#discussion_r550821082
Please reload this pagehttps://github.com/github/codeql/pull/4473/
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 30, 2022https://github.com/github/codeql/pull/4473/#discussion_r838830023
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qhelphttps://github.com/github/codeql/pull/4473/files#diff-9bb2edbea314e232ee82e413e12b4d3babfa3d18648020e7ed50da275fd10aa3
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/lib/semmle/code/java/security/TempFileLib.qllhttps://github.com/github/codeql/pull/4473/files#diff-8c96cebd4fe5581c7330fef35e06df975c1760da481b5586896554bf1bc06aba
Marcono1234https://github.com/Marcono1234
Mar 15, 2022https://github.com/github/codeql/pull/4473/#discussion_r827482825
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
style guidehttps://github.com/github/codeql/blob/main/docs/qldoc-style-guide.md#qldoc-for-classes
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qhelphttps://github.com/github/codeql/pull/4473/files#diff-9bb2edbea314e232ee82e413e12b4d3babfa3d18648020e7ed50da275fd10aa3
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qlhttps://github.com/github/codeql/pull/4473/files#diff-83804d76b24d0fe2fe4643a63bf4d673fc6b881d223d9f49d0a498cf6b41b7b9
Marcono1234https://github.com/Marcono1234
Mar 15, 2022https://github.com/github/codeql/pull/4473/#discussion_r827484601
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 18, 2022https://github.com/github/codeql/pull/4473/#discussion_r830372193
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qlhttps://github.com/github/codeql/pull/4473/files#diff-83804d76b24d0fe2fe4643a63bf4d673fc6b881d223d9f49d0a498cf6b41b7b9
Marcono1234https://github.com/Marcono1234
Mar 15, 2022https://github.com/github/codeql/pull/4473/#discussion_r827485715
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qlhttps://github.com/github/codeql/pull/4473/files#diff-83804d76b24d0fe2fe4643a63bf4d673fc6b881d223d9f49d0a498cf6b41b7b9
Please reload this pagehttps://github.com/github/codeql/pull/4473/
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qlhttps://github.com/github/codeql/pull/4473/files#diff-83804d76b24d0fe2fe4643a63bf4d673fc6b881d223d9f49d0a498cf6b41b7b9
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/smowton
smowtonhttps://github.com/smowton
Mar 16, 2022https://github.com/github/codeql/pull/4473/#issuecomment-1068982512
#8032https://github.com/github/codeql/pull/8032
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
force-pushedhttps://github.com/github/codeql/compare/5a9ed32f9c574da9d139076286f6de241e8cd4ec..a6d7a2a14ecd7207cec14e876f7c62517a1222c3
5a9ed32https://github.com/github/codeql/commit/5a9ed32f9c574da9d139076286f6de241e8cd4ec
a6d7a2ahttps://github.com/github/codeql/commit/a6d7a2a14ecd7207cec14e876f7c62517a1222c3
Compare https://github.com/github/codeql/compare/5a9ed32f9c574da9d139076286f6de241e8cd4ec..a6d7a2a14ecd7207cec14e876f7c62517a1222c3
March 18, 2022 14:48https://github.com/github/codeql/pull/4473/#event-6266722883
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 18, 2022 https://github.com/github/codeql/pull/4473/#ref-issue-1173833760
False Negative: Guards in while loop with break fail to 'control' variable usage outside #8490 https://github.com/github/codeql/issues/8490
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 18, 2022 https://github.com/github/codeql/pull/4473/#pullrequestreview-914771131
View reviewed changes https://github.com/github/codeql/pull/4473/files
java/ql/test/query-tests/security/CWE-378/semmle/tests/Test.javahttps://github.com/github/codeql/pull/4473/files#diff-d32679d9c487a0556d0aa3f9b31351e219a906fb3fbba6f634407fd1bdc3f42d
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 18, 2022https://github.com/github/codeql/pull/4473/#discussion_r830282754
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
#8490https://github.com/github/codeql/issues/8490
@smowtonhttps://github.com/smowton
Please reload this pagehttps://github.com/github/codeql/pull/4473/
smowtonhttps://github.com/smowton
Mar 30, 2022https://github.com/github/codeql/pull/4473/#discussion_r838658673
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
#8490https://github.com/github/codeql/issues/8490
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 18, 2022 https://github.com/github/codeql/pull/4473/#pullrequestreview-914897221
View reviewed changes https://github.com/github/codeql/pull/4473/files
java/ql/test/query-tests/security/CWE-378/semmle/tests/Test.javahttps://github.com/github/codeql/pull/4473/files#diff-d32679d9c487a0556d0aa3f9b31351e219a906fb3fbba6f634407fd1bdc3f42d
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 18, 2022https://github.com/github/codeql/pull/4473/#discussion_r830373873
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
Mar 28, 2022 https://github.com/github/codeql/pull/4473/#pullrequestreview-923609777
View reviewed changes https://github.com/github/codeql/pull/4473/files
java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.qlhttps://github.com/github/codeql/pull/4473/files#diff-83804d76b24d0fe2fe4643a63bf4d673fc6b881d223d9f49d0a498cf6b41b7b9
Please reload this pagehttps://github.com/github/codeql/pull/4473/
JLLeitschuhhttps://github.com/JLLeitschuh
May 3, 2022 11:41https://github.com/github/codeql/pull/4473/#commits-pushed-545eb2c
https://github.com/JLLeitschuh
Fix inverted predicate logic and add additional test caseshttps://github.com/github/codeql/pull/4473/commits/545eb2c4b6de5f5c574c1d08775726c515fe9c8c
545eb2chttps://github.com/github/codeql/pull/4473/commits/545eb2c4b6de5f5c574c1d08775726c515fe9c8c
https://github.com/JLLeitschuh
Improve TempDir hijacking detection with Guardhttps://github.com/github/codeql/pull/4473/commits/253c96f706e0d2330d4887b97db3a783f97aa11b
253c96fhttps://github.com/github/codeql/pull/4473/commits/253c96f706e0d2330d4887b97db3a783f97aa11b
https://github.com/JLLeitschuh
Improve warning in TempDirHijackingVulnerabilityhttps://github.com/github/codeql/pull/4473/commits/d9d5b67949592fd032aa78610e67a0d63c4144c4
d9d5b67https://github.com/github/codeql/pull/4473/commits/d9d5b67949592fd032aa78610e67a0d63c4144c4
https://github.com/JLLeitschuh
Add documentation and additional test caseshttps://github.com/github/codeql/pull/4473/commits/1fc762932145dceb5d4e61b1dfc1bb6605303b72
1fc7629https://github.com/github/codeql/pull/4473/commits/1fc762932145dceb5d4e61b1dfc1bb6605303b72
https://github.com/JLLeitschuh
Improve TempDirHijackingVulnerability messagehttps://github.com/github/codeql/pull/4473/commits/b42ff137315cb24fbab6be07b32891035b8d1e4f
b42ff13https://github.com/github/codeql/pull/4473/commits/b42ff137315cb24fbab6be07b32891035b8d1e4f
https://github.com/JLLeitschuh
Add predicate handling isDirectory casehttps://github.com/github/codeql/pull/4473/commits/20bd05b530e6a95f648011610e8fe3cd55f2c65d
20bd05bhttps://github.com/github/codeql/pull/4473/commits/20bd05b530e6a95f648011610e8fe3cd55f2c65d
https://github.com/JLLeitschuh
Add deleteOnExit as safe usagehttps://github.com/github/codeql/pull/4473/commits/442ef834c854ef1702745241fab88e5dca048e0f
442ef83https://github.com/github/codeql/pull/4473/commits/442ef834c854ef1702745241fab88e5dca048e0f
https://github.com/JLLeitschuh
Start taint hijacking tracking with java.io.tmpdirhttps://github.com/github/codeql/pull/4473/commits/fbecfdd8184f0f7892211f739f3f8648cdd8dc37
fbecfddhttps://github.com/github/codeql/pull/4473/commits/fbecfdd8184f0f7892211f739f3f8648cdd8dc37
https://github.com/JLLeitschuh
Refactor common logic into TempFileLibhttps://github.com/github/codeql/pull/4473/commits/8a7d64dba8df555201a2895b57b4ae366cf37c5e
8a7d64dhttps://github.com/github/codeql/pull/4473/commits/8a7d64dba8df555201a2895b57b4ae366cf37c5e
https://github.com/JLLeitschuh
Refactor more logic to TempFileLibhttps://github.com/github/codeql/pull/4473/commits/884db9ee334a92531df2aff20bb29c0b258f1b6f
884db9ehttps://github.com/github/codeql/pull/4473/commits/884db9ee334a92531df2aff20bb29c0b258f1b6f
https://github.com/JLLeitschuh
https://github.com/Marcono1234
Apply suggestions from code reviewhttps://github.com/github/codeql/pull/4473/commits/6f4ed4bd3b3e62a0ffbd17bd3c6453cc6220fc11
6f4ed4bhttps://github.com/github/codeql/pull/4473/commits/6f4ed4bd3b3e62a0ffbd17bd3c6453cc6220fc11
https://github.com/JLLeitschuh
Refactor TempDirHijacking to show complete pathhttps://github.com/github/codeql/pull/4473/commits/03983f1f100a12260e38827f7f64f189b811582f
03983f1https://github.com/github/codeql/pull/4473/commits/03983f1f100a12260e38827f7f64f189b811582f
https://github.com/JLLeitschuh
Update to use new getSystemProperty predicatehttps://github.com/github/codeql/pull/4473/commits/37b1e1d30d4aebfe04a077a771ab53175947fd72
37b1e1dhttps://github.com/github/codeql/pull/4473/commits/37b1e1d30d4aebfe04a077a771ab53175947fd72
https://github.com/JLLeitschuh
Add additional test caseshttps://github.com/github/codeql/pull/4473/commits/ac8e1cc9bce3f6a92f31f9ff1e6277f18e3a0898
ac8e1cchttps://github.com/github/codeql/pull/4473/commits/ac8e1cc9bce3f6a92f31f9ff1e6277f18e3a0898
https://github.com/JLLeitschuh
Fix some false positive paths with FlowStatehttps://github.com/github/codeql/pull/4473/commits/84003c1e44291ba98d447a0fa8dd58170598d501
84003c1https://github.com/github/codeql/pull/4473/commits/84003c1e44291ba98d447a0fa8dd58170598d501
https://github.com/JLLeitschuh
Finalize and document FlowState usagehttps://github.com/github/codeql/pull/4473/commits/4b6d1a461e64c62b6b79bdc1af3ecc2821647ae6
4b6d1a4https://github.com/github/codeql/pull/4473/commits/4b6d1a461e64c62b6b79bdc1af3ecc2821647ae6
https://github.com/JLLeitschuh
Add NullLiteral flow check for File.createTempFilehttps://github.com/github/codeql/pull/4473/commits/325d0e1f67e1db48ef5abf95d87a6c5d733f1716
325d0e1https://github.com/github/codeql/pull/4473/commits/325d0e1f67e1db48ef5abf95d87a6c5d733f1716
https://github.com/JLLeitschuh
Add additional tests and better tracking of 'unsafe use'https://github.com/github/codeql/pull/4473/commits/71f5fc550c2a80e73656fa467c56a649489302d2
71f5fc5https://github.com/github/codeql/pull/4473/commits/71f5fc550c2a80e73656fa467c56a649489302d2
https://github.com/JLLeitschuh
Add additional tests cases for mkdir wrapper method checkinghttps://github.com/github/codeql/pull/4473/commits/140c66e6b4130e9ef8607bb7c7714fc0d79e48ce
140c66ehttps://github.com/github/codeql/pull/4473/commits/140c66e6b4130e9ef8607bb7c7714fc0d79e48ce
https://github.com/JLLeitschuh
Add release noteshttps://github.com/github/codeql/pull/4473/commits/21bef99f8ed50a574cfcfb985beaa1de062cdcf8
21bef99https://github.com/github/codeql/pull/4473/commits/21bef99f8ed50a574cfcfb985beaa1de062cdcf8
https://github.com/JLLeitschuh
Rename localExprFlowPlusInitializers to localExprOrInitializerFlowhttps://github.com/github/codeql/pull/4473/commits/407dd05a97bdf027baefc63e24f6e2cc9b5cad11
407dd05https://github.com/github/codeql/pull/4473/commits/407dd05a97bdf027baefc63e24f6e2cc9b5cad11
https://github.com/JLLeitschuh
Expand isDeleteFileExpr to include delete method wrappershttps://github.com/github/codeql/pull/4473/commits/0f5a1e7aa429348f584f46f2982d762b4b243f38
0f5a1e7https://github.com/github/codeql/pull/4473/commits/0f5a1e7aa429348f584f46f2982d762b4b243f38
https://github.com/JLLeitschuh
https://github.com/smowton
Apply suggestions from code reviewhttps://github.com/github/codeql/pull/4473/commits/e7f016e299364ed8de1face6bf2a05cf112ec5cc
e7f016ehttps://github.com/github/codeql/pull/4473/commits/e7f016e299364ed8de1face6bf2a05cf112ec5cc
https://github.com/JLLeitschuh
Fix implicit 'this' use in TempFileLibhttps://github.com/github/codeql/pull/4473/commits/3a5025309295b3d25650cff1980bdc3463120202
3a50253https://github.com/github/codeql/pull/4473/commits/3a5025309295b3d25650cff1980bdc3463120202
https://github.com/JLLeitschuh
Cleanup after rebase on mainhttps://github.com/github/codeql/pull/4473/commits/cd3662c4350d3458ffc2af69bb2d1b9c56a28b6e
cd3662chttps://github.com/github/codeql/pull/4473/commits/cd3662c4350d3458ffc2af69bb2d1b9c56a28b6e
https://github.com/JLLeitschuh
JLLeitschuhhttps://github.com/JLLeitschuh
force-pushedhttps://github.com/github/codeql/compare/e0ef00b5ef78d7067f8f4bbf992ac9b2cfd6f2a7..cd3662c4350d3458ffc2af69bb2d1b9c56a28b6e
e0ef00bhttps://github.com/github/codeql/commit/e0ef00b5ef78d7067f8f4bbf992ac9b2cfd6f2a7
cd3662chttps://github.com/github/codeql/commit/cd3662c4350d3458ffc2af69bb2d1b9c56a28b6e
Compare https://github.com/github/codeql/compare/e0ef00b5ef78d7067f8f4bbf992ac9b2cfd6f2a7..cd3662c4350d3458ffc2af69bb2d1b9c56a28b6e
May 3, 2022 15:51https://github.com/github/codeql/pull/4473/#event-6541836989
https://github.com/smowton
Clean up function naming, documentation, and to some degree code with…https://github.com/github/codeql/pull/4473/commits/a2a7c735bbdd4dcaa793768e87fda93782ea0dcc
a2a7c73https://github.com/github/codeql/pull/4473/commits/a2a7c735bbdd4dcaa793768e87fda93782ea0dcc
https://github.com/smowton
smowtonhttps://github.com/smowton
May 9, 2022https://github.com/github/codeql/pull/4473/#issuecomment-1121515518
JLLeitschuh#8https://github.com/JLLeitschuh/ql/pull/8
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/smowton
smowtonhttps://github.com/smowton
May 10, 2022https://github.com/github/codeql/pull/4473/#issuecomment-1122220972
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
Merge pull requesthttps://github.com/github/codeql/pull/4473/commits/b412c7fb05ebb1aa3717d8645fdbf280afef071f
#8https://github.com/JLLeitschuh/ql/pull/8
from smowton/feat/JLL/java/CWE-378https://github.com/github/codeql/pull/4473/commits/b412c7fb05ebb1aa3717d8645fdbf280afef071f
https://github.com/github/codeql/commit/b412c7fb05ebb1aa3717d8645fdbf280afef071f#comments
b412c7fhttps://github.com/github/codeql/pull/4473/commits/b412c7fb05ebb1aa3717d8645fdbf280afef071f
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4473/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4473%2F
https://github.com/smowton
smowton https://github.com/smowton
https://github.com/github/codeql/pull/4473/files/d616677ec82faed5528f744079452fe36b25d003
https://github.com/aschackmull
aschackmull https://github.com/aschackmull
https://github.com/Marcono1234
Marcono1234 https://github.com/Marcono1234
https://github.com/github/codeql/pull/4473/files/88aa4645231e7340121709a1bc98523bbd1cce2c
https://github.com/smowton
smowton https://github.com/smowton
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Java https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava
Please reload this pagehttps://github.com/github/codeql/pull/4473/
https://github.com/JLLeitschuh
https://github.com/Marcono1234
https://github.com/trgpa
https://github.com/smowton
https://github.com/aschackmull
https://github.com/apps/github-advanced-security
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.