hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

remove old comments

Browse Source
This commit is contained in:
am0o0
2024-06-07 05:40:17 +02:00
parent a5363286f1
commit 273848c879
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cpp/ql/src/experimental/Security/CWE/CWE-409-DecompressionBomb/DecompressionBombs.ql
View File

@@ -115,12 +115,10 @@ module DecompressionTaintConfig implements DataFlow::StateConfigSig {
(
exists(FunctionCall fc | fc.getTarget() instanceof GzopenFunction |
fc.getArgument(0) = source.asExpr() and
// arg 0 can be a path string whichwe must do following check
// arg 0 can be a path string which we must do following check
not fc.getArgument(0).isConstant()
)
or
// IDK whether it is good to use all file decriptors function returns as source or not
// because we can do more sanitization from fd function sources
exists(FunctionCall fc | fc.getTarget() instanceof GzdopenFunction |
fc.getArgument(0) = source.asExpr()
)