Is it possible to write a custom rule to address Semantic categeory findings?

2780 views

Specifically for "SQL Injection" and "Process Control" findings?

The use of mysql_stmt_prepare() raises an "SQL Injection" finding and the use of dlopen() raises a "Process Control" finding (both, understandably so). These two findings are in the Semantic vulnerability category. I have tried writing custom rules to addresses these findings, but have not succeeded. Am I correct in thinking that it simply is not possble to write a custom rule for findings in the Semantic category?

Thanks,

0 Replies

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the . Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.