From 3eae13161fd6335d617ebaef85d908bd0c2f2af8 Mon Sep 17 00:00:00 2001 From: Ahmed Farid <53880570+ahmed532009@users.noreply.github.com> Date: Tue, 1 Mar 2022 00:01:34 +0100 Subject: [PATCH] Delete ZipSlipCheckLib.ql --- .../Security/CWE-022/ZipSlipCheckLib.ql | 35 ------------------- 1 file changed, 35 deletions(-) delete mode 100644 python/ql/src/experimental/Security/CWE-022/ZipSlipCheckLib.ql diff --git a/python/ql/src/experimental/Security/CWE-022/ZipSlipCheckLib.ql b/python/ql/src/experimental/Security/CWE-022/ZipSlipCheckLib.ql deleted file mode 100644 index 206648b8a0c..00000000000 --- a/python/ql/src/experimental/Security/CWE-022/ZipSlipCheckLib.ql +++ /dev/null @@ -1,35 +0,0 @@ -private import python -private import semmle.python.Concepts -private import semmle.python.ApiGraphs -private import semmle.python.dataflow.new.DataFlow -private import semmle.python.dataflow.new.RemoteFlowSources - -abstract class CopyZipFile extends DataFlow::Node { } - -abstract class OpenZipFile extends DataFlow::CallCfgNode { } - -private class CopyZip extends CopyZipFile { - CopyZip() { - exists(DataFlow::CallCfgNode call, DataFlow::Node pred | - call = API::moduleImport("shutil").getMember([ - // these are used to copy files - "copyfile", "copy", "copy2", "copytree", "copyfileobj", - // these are used to move files - "move"]) - .getACall() and - - call.getArg(0) = pred - ) - } - -} -private class OpenZip extends OpenZipFile { - OpenZip() { - exists(DataFlow::CallCfgNode call | - call = API::moduleImport("zipfile").getMember("ZipFile").getMember("open").getACall() - ) - } - -} - -