Skip to content
Discussion options

You must be logged in to vote

If you want to find all string literals ending in ".zip" the following would work.

from StrConst s, DataFlow::Node n
where 
  n.asExpr() = s and
  s.getText().matches("%.zip")

Then if you used taint-flow you would see filename2 was also tainted and therefore get similar results to if filename2 was the source.

Replies: 2 comments 2 replies

Comment options

You must be logged in to vote
1 reply
@Sim4n6
Comment options

Comment options

You must be logged in to vote
1 reply
@Sim4n6
Comment options

Answer selected by Sim4n6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants