CodeQL library for C/C++
codeql/cpp-all 2.1.1 (changelog, source)
Search

Predicate shellCommand

A command that is used as a command, or component of a command, that will be executed by a general-purpose command interpreter such as sh or cmd.exe.

Import path

import semmle.code.cpp.security.CommandExecution
predicate shellCommand(Expr command, string callChain)