hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-01 05:13:41 +01:00
Code Issues Packages Projects Releases Wiki Activity

Remove sanitizing condition which does not prevent

Browse Source 
vulnerability.
This commit is contained in:
Alvaro Muñoz
2021-02-10 12:21:48 +01:00
parent 26288ad391
commit 3b4357792b
1 changed files with 1 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
java/ql/src/semmle/code/java/frameworks/SnakeYaml.qll
View File

@@ -7,13 +7,6 @@ import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.DataFlow2
import semmle.code.java.dataflow.DataFlow3
/**
* The class `org.yaml.snakeyaml.constructor.Constructor`.
*/
class SnakeYamlConstructor extends RefType {
SnakeYamlConstructor() { this.hasQualifiedName("org.yaml.snakeyaml.constructor", "Constructor") }
}
/**
* The class `org.yaml.snakeyaml.constructor.SafeConstructor`.
*/
@@ -24,14 +17,11 @@ class SnakeYamlSafeConstructor extends RefType {
}
/**
* An instance of `SafeConstructor` or a `Constructor` that only allows the type that is passed into its argument.
* An instance of `SafeConstructor`
*/
class SafeSnakeYamlConstruction extends ClassInstanceExpr {
SafeSnakeYamlConstruction() {
this.getConstructedType() instanceof SnakeYamlSafeConstructor
or
this.getConstructedType() instanceof SnakeYamlConstructor and
this.getNumArgument() > 0
}
}