hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-22 18:03:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

Delete ZipSlipCheckLib.ql

Browse Source
This commit is contained in:
Ahmed Farid
2022-03-01 00:01:34 +01:00
committed by GitHub
parent 21f6ad5190
commit 3eae13161f
1 changed files with 0 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
python/ql/src/experimental/Security/CWE-022/ZipSlipCheckLib.ql
View File

@@ -1,35 +0,0 @@
private import python
private import semmle.python.Concepts
private import semmle.python.ApiGraphs
private import semmle.python.dataflow.new.DataFlow
private import semmle.python.dataflow.new.RemoteFlowSources
abstract class CopyZipFile extends DataFlow::Node { }
abstract class OpenZipFile extends DataFlow::CallCfgNode { }
private class CopyZip extends CopyZipFile {
CopyZip() {
exists(DataFlow::CallCfgNode call, DataFlow::Node pred |
call = API::moduleImport("shutil").getMember([
// these are used to copy files
"copyfile", "copy", "copy2", "copytree", "copyfileobj",
// these are used to move files
"move"])
.getACall() and
call.getArg(0) = pred
)
}
}
private class OpenZip extends OpenZipFile {
OpenZip() {
exists(DataFlow::CallCfgNode call |
call = API::moduleImport("zipfile").getMember("ZipFile").getMember("open").getACall()
)
}
}