The dbm family (dbm.gnu, dbm.ndbm, dbm.dumb). dbm.open() on untrusted files reads a DBM-format database. dbm.dumb is pickle-like and unsafe on untrusted input.
.open().open()Sinkdbm.open(file, flag='r', mode=0o666) -> dbm
Opens a DBM database. Finding on untrusted files (dbm.dumb is especially unsafe).
0| FQN | Field | |
|---|---|---|
| dbm | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PyDbm