codeql
codeql copied to clipboard
C++: Support SQL Injection sinks for Oracle Call Interface (OCI)
trafficstars
Fixes #19764
- Allow queries to be extended using a new
sql-injectionModels as Data (MaD) sink kind for C/C++. - Add
sql-injectionsink models for the Oracle Call Interface (OCI) database library functionsOCIStmtPrepareandOCIStmtPrepare2.