pub fn check_cwe(
    analysis_results: &AnalysisResults<'_>,
    _cwe_params: &Value
) -> (Vec<LogMessage>, Vec<CweWarning>)
Expand description

Execute the CWE check.

For each call to umask we check whether the parameter value is a chmod-style parameter. If yes, generate a CWE warning. If the parameter value cannot be determined, generate a log message.

Only the basic block right before the umask call is evaluated when trying to determine the parameter value of umask.