rust

Semgrep
Author
unknown
Download Count*
LGPL Commons Clause
License

General purpose ruleset for Rust. Includes audit-oriented rules, which might lead to false positives.

Run Locally

Rules (57)

generic.unicode.security.bidi.contains-bidirectional-characters

profile photo of semgrepsemgrep

This code contains bidirectional (bidi) characters. While this is useful for support of right-to-left languages such as Arabic or Hebrew, it can also be used to trick language parsers into executing code in a manner that is different from how it is displayed in code editing and review tools. If this is not what you were expecting, please review this code in an editor that can reveal hidden Unicode characters.

rust.lang.security.args-os.args-os

profile photo of semgrepsemgrep

args_os should not be used for security operations. From the docs: "The first element is traditionally the path of the executable, but it can be set to arbitrary text, and might not even exist. This means this property should not be relied upon for security purposes."

rust.lang.security.args.args

profile photo of semgrepsemgrep

args should not be used for security operations. From the docs: "The first element is traditionally the path of the executable, but it can be set to arbitrary text, and might not even exist. This means this property should not be relied upon for security purposes."

rust.lang.security.current-exe.current-exe

profile photo of semgrepsemgrep

current_exe should not be used for security operations. From the docs: "The output of this function should not be trusted for anything that might have security implications. Basically, if users can run the executable, they can change the output arbitrarily."

rust.lang.security.temp-dir.temp-dir

profile photo of semgrepsemgrep

temp_dir should not be used for security operations. From the docs: 'The temporary directory may be shared among users, or between processes with different privileges; thus, the creation of any files or directories in the temporary directory must use a secure method to create a uniquely named file. Creating a file or directory with a fixed or predictable name may result in “insecure temporary file” security vulnerabilities.'