codeql icon indicating copy to clipboard operation
codeql copied to clipboard

C++: Support SQL Injection sinks for Oracle Call Interface (OCI)

Open ebickle opened this issue 5 months ago • 0 comments
trafficstars

Fixes #19764

  • Allow queries to be extended using a new sql-injection Models as Data (MaD) sink kind for C/C++.
  • Add sql-injection sink models for the Oracle Call Interface (OCI) database library functions OCIStmtPrepare and OCIStmtPrepare2.

ebickle avatar Jun 20 '25 13:06 ebickle