Check all session and cursor aliases

py_find_injection/__init__.py

@@ -4,10 +4,9 @@
 import ast
 import sys
 
-version_info = (0, 1, 1)
+version_info = (0, 1, 2)
 __version__ = '.'.join(map(str, version_info))
 
-
 def stringify(node):
     if isinstance(node, ast.Name):
         return node.id
@@ -77,11 +76,15 @@ def check_execute(self, node):
 
     def visit_Call(self, node):
         function_name = stringify(node.func)
-        if function_name.lower() in ('session.execute', 'cursor.execute'):
-            node.args[0].parent = node
-            node_error = self.check_execute(node.args[0])
-            if node_error:
-                self.errors.append(node_error)
+        # catch and check aliases of session.execute and cursor.execute
+        if function_name.lower().endswith('.execute'):
+            try:
+                node.args[0].parent = node
+                node_error = self.check_execute(node.args[0])
+                if node_error:
+                    self.errors.append(node_error)
+            except IndexError:
+                pass
         elif function_name.lower() == 'eval':
             self.errors.append(IllegalLine('eval() is just generally evil', node, self.filename))
         self.generic_visit(node)

setup.py

@@ -3,7 +3,7 @@
 
 setup(
     name="py-find-injection",
-    version="0.1.1",
+    version="0.1.2",
     author="James Brown",
     author_email="[email protected]",
     url="https://github.com/uber/py-find-injection",