diff --git a/.lgtm/cpp-queries/fgets.ql b/.lgtm/cpp-queries/fgets.ql new file mode 100644 index 0000000000..82de8c4482 --- /dev/null +++ b/.lgtm/cpp-queries/fgets.ql @@ -0,0 +1,23 @@ +/** + * @name Use of fgets() + * @description fgets() is dangerous to call. Use read_line() instead. + * @kind problem + * @problem.severity error + * @precision high + * @id cpp/fgets + * @tags reliability + * security + */ +import cpp + + +predicate dangerousFunction(Function function) { + exists (string name | name = function.getQualifiedName() | + name = "fgets") +} + + +from FunctionCall call, Function target +where call.getTarget() = target + and dangerousFunction(target) +select call, target.getQualifiedName() + " is potentially dangerous"