hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

add note in ReDoS qhelp that Ruby 3.2 has fixed ReDoS

Browse Source
This commit is contained in:
erik-krogh
2023-01-25 10:14:07 +01:00
parent 358ae7529b
commit 54b0350cac
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ruby/ql/src/queries/security/cwe-1333/ReDoSIntroduction.inc.qhelp
View File

@@ -19,6 +19,12 @@
shape, increasing the input length by ten characters may make the
automaton about 1000 times slower.
</p>
<p>
Note that Ruby 3.2 and later have implemented a caching mechanism that
completely eliminates the worst-case time complexity for the regular
expressions flagged by this query. The regular expressions flagged by this
query are therefore only problematic for Ruby versions prior to 3.2.
</p>
<p>
Typically, a regular expression is affected by this problem if it contains
a repetition of the form <code>r*</code> or <code>r+</code> where the