Update ZipSlip.expected

This commit is contained in:
Ahmed Farid
2022-03-07 00:23:48 +01:00
committed by GitHub
parent ce7923c8b3
commit 6233309028

View File

@@ -1,10 +1,14 @@
edges
| zipslip_bad.py:6:9:6:33 | ControlFlowNode for Attribute() | zipslip_bad.py:8:11:8:15 | SSA variable entry |
| zipslip_bad.py:8:11:8:15 | SSA variable entry | zipslip_bad.py:9:23:9:27 | ControlFlowNode for entry |
| zipslip_bad.py:14:9:14:33 | ControlFlowNode for Attribute() | zipslip_bad.py:17:32:17:35 | ControlFlowNode for zipf |
nodes
| zipslip_bad.py:6:9:6:33 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
| zipslip_bad.py:8:11:8:15 | SSA variable entry | semmle.label | SSA variable entry |
| zipslip_bad.py:9:23:9:27 | ControlFlowNode for entry | semmle.label | ControlFlowNode for entry |
| zipslip_bad.py:14:9:14:33 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
| zipslip_bad.py:17:32:17:35 | ControlFlowNode for zipf | semmle.label | ControlFlowNode for zipf |
subpaths
#select
| zipslip_bad.py:9:23:9:27 | ControlFlowNode for entry | zipslip_bad.py:6:9:6:33 | ControlFlowNode for Attribute() | zipslip_bad.py:9:23:9:27 | ControlFlowNode for entry | Extraction of zipfile from $@ | zipslip_bad.py:6:9:6:33 | ControlFlowNode for Attribute() | a potentially untrusted source |
| zipslip_bad.py:17:32:17:35 | ControlFlowNode for zipf | zipslip_bad.py:14:9:14:33 | ControlFlowNode for Attribute() | zipslip_bad.py:17:32:17:35 | ControlFlowNode for zipf | Extraction of zipfile from $@ | zipslip_bad.py:14:9:14:33 | ControlFlowNode for Attribute() | a potentially untrusted source |