29 (checkParamikoCalls, ("S601",)), |
29 (checkParamikoCalls, ("S601",)), |
30 ], |
30 ], |
31 } |
31 } |
32 |
32 |
33 |
33 |
34 def checkParamikoCalls(reportError, context, config): # noqa: U100 |
34 def checkParamikoCalls(reportError, context, _config): |
35 """ |
35 """ |
36 Function to check for shell injection within Paramiko. |
36 Function to check for shell injection within Paramiko. |
37 |
37 |
38 @param reportError function to be used to report errors |
38 @param reportError function to be used to report errors |
39 @type func |
39 @type func |
40 @param context security context object |
40 @param context security context object |
41 @type SecurityContext |
41 @type SecurityContext |
42 @param config dictionary with configuration data |
42 @param _config dictionary with configuration data (unused) |
43 @type dict |
43 @type dict |
44 """ |
44 """ |
45 for module in ["paramiko"]: |
45 for module in ["paramiko"]: |
46 if context.isModuleImportedLike(module) and context.callFunctionName in [ |
46 if context.isModuleImportedLike(module) and context.callFunctionName in [ |
47 "exec_command" |
47 "exec_command" |