diff --git a/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll b/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll index 87a47ebeb00..f05e5826420 100644 --- a/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll +++ b/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll @@ -381,7 +381,7 @@ module Zstd { class DecompressionSink extends DecompressionBomb::Sink { DecompressionSink() { exists(API::CallNode zstdCall | zstdCall = zstdInstance().getACall() | - this = zstdCall.getParameter(0, "filename").asSink() and + this = zstdCall.getParameter(0, "file").asSink() and ( not exists( zstdCall