hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

recognize ranges without upper bounds

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-11-11 14:20:08 +01:00
parent acaf294bee
commit 1a8b6d7414
6 changed files with 34 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
python/ql/lib/semmle/python/security/performance/ReDoSUtil.qll
View File

@@ -550,7 +550,10 @@ private class EffectivelyPlus extends RegExpTerm {
EffectivelyPlus() {
this instanceof RegExpPlus
or
exists(RegExpRange range | range.getLowerBound() = 1 and range.getUpperBound() >= 30 |
exists(RegExpRange range |
range.getLowerBound() = 1 and
(range.getUpperBound() >= 30 or not exists(range.getUpperBound()))
|
this = range
)
}
@@ -564,7 +567,10 @@ private class EffectivelyStar extends RegExpTerm {
EffectivelyStar() {
this instanceof RegExpStar
or
exists(RegExpRange range | range.getLowerBound() = 0 and range.getUpperBound() >= 30 |
exists(RegExpRange range |
range.getLowerBound() = 0 and
(range.getUpperBound() >= 30 or not exists(range.getUpperBound()))
|
this = range
)
}