New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix boolean check in PossibleWebpBufferOverflow rule #11648

Open

Kisbogyi wants to merge 1 commit into Azure:master from Kisbogyi:WebpCheckFix

+2 −2

Kisbogyi commented Jan 9, 2025

Required items, please complete

Change(s):

Updated Boolean value in PossibleWebpBufferOverflow.yaml

Reason for Change(s):

| where DeviceId in (VulnDevices) and InitiatingProcessCommandLine has(".webp") or ProcessCommandLine has(".webp")
Here if ProcessCommandLine has(".webp") is true the whole line is true, because first the left, right side of and will be evalueated, and then the or.

Version Updated:

Yes
from 1.1.1 -> to 1.1.2

Testing Completed:

Yes

Checked that the validations are passing and have addressed any issues that are present:

Needs Help
I could not make .NET 3.1 work No usable version of libssl was found


          Fix boolean check in PossibleWebpBufferOverflow rule

dbea853

Kisbogyi requested review from a team as code owners

January 9, 2025 16:31

v-prasadboke self-assigned this

v-prasadboke added the Solution label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels