
import bandit
import stat
from bandit.test_selector import *

@checks_functions
def call_bad_permissions(context):
    if 'chmod' in context.call_function_name:
        if context.call_args_count == 2:
            mode = context.get_call_arg_at_position(1)

            if mode is not None and (mode & stat.S_IWOTH or mode & stat.S_IXGRP):
                filename = context.get_call_arg_at_position(0)
                if filename is None:
                    filename = 'NOT PARSED'

                return(bandit.ERROR, 'Chmod setting a permissive mask %s on '
                       'file (%s).' % (oct(mode), filename))


import bandit
import stat
from bandit.test_selector import *

@checks_functions
def call_bad_permissions(context):
    if 'chmod' in context.call_function_name:
        if context.call_args_count == 2:
            mode = context.get_call_arg_at_position(1)

            if(mode is not None and type(mode) == int and
                   (mode & stat.S_IWOTH or mode & stat.S_IXGRP)):
                filename = context.get_call_arg_at_position(0)
                if filename is None:
                    filename = 'NOT PARSED'

                return(bandit.ERROR, 'Chmod setting a permissive mask %s on '
                       'file (%s).' % (oct(mode), filename))

Fix bug with permissions matching
Fix bug with permissions matching

  
  import bandit
  import stat
  from bandit.test_selector import *
  
  @checks_functions
  def call_bad_permissions(context):
      if 'chmod' in context.call_function_name:
          if context.call_args_count == 2:
              mode = context.get_call_arg_at_position(1)
  
+             if(mode is not None and type(mode) == int and
-             if mode is not None and (mode & stat.S_IWOTH or mode & stat.S_IXGRP):
+                    (mode & stat.S_IWOTH or mode & stat.S_IXGRP)):
                  filename = context.get_call_arg_at_position(0)
                  if filename is None:
                      filename = 'NOT PARSED'
  
                  return(bandit.ERROR, 'Chmod setting a permissive mask %s on '
                         'file (%s).' % (oct(mode), filename))
  
Fix bug with permissions matching
## Code Before:

import bandit
import stat
from bandit.test_selector import *

@checks_functions
def call_bad_permissions(context):
    if 'chmod' in context.call_function_name:
        if context.call_args_count == 2:
            mode = context.get_call_arg_at_position(1)

            if mode is not None and (mode & stat.S_IWOTH or mode & stat.S_IXGRP):
                filename = context.get_call_arg_at_position(0)
                if filename is None:
                    filename = 'NOT PARSED'

                return(bandit.ERROR, 'Chmod setting a permissive mask %s on '
                       'file (%s).' % (oct(mode), filename))

## Instruction:
Fix bug with permissions matching
## Code After:

import bandit
import stat
from bandit.test_selector import *

@checks_functions
def call_bad_permissions(context):
    if 'chmod' in context.call_function_name:
        if context.call_args_count == 2:
            mode = context.get_call_arg_at_position(1)

            if(mode is not None and type(mode) == int and
                   (mode & stat.S_IWOTH or mode & stat.S_IXGRP)):
                filename = context.get_call_arg_at_position(0)
                if filename is None:
                    filename = 'NOT PARSED'

                return(bandit.ERROR, 'Chmod setting a permissive mask %s on '
                       'file (%s).' % (oct(mode), filename))
