hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Simplify getTarget check

Browse Source
This commit is contained in:
edvraa
2021-04-15 15:23:03 +03:00
parent b027fddc7e
commit 1581a27d3d
1 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
csharp/ql/src/semmle/code/csharp/security/dataflow/UnsafeDeserialization.qll
View File

@@ -63,9 +63,8 @@ module UnsafeDeserialization {
override predicate isSource(DataFlow::Node source) { source instanceof Source }
override predicate isSink(DataFlow::Node sink) {
exists(MethodCall mc, Method m |
m = mc.getTarget() and
m instanceof UnsafeDeserializerCallable and
exists(MethodCall mc |
mc.getTarget() instanceof UnsafeDeserializerCallable and
sink.asExpr() = mc.getQualifier()
)
}
@@ -102,9 +101,8 @@ module UnsafeDeserialization {
}
override predicate isSink(DataFlow::Node sink) {
exists(MethodCall mc, Method m |
m = mc.getTarget() and
m instanceof UnsafeDeserializerCallable and
exists(MethodCall mc |
mc.getTarget() instanceof UnsafeDeserializerCallable and
sink.asExpr() = mc.getQualifier()
)
}