From 8602a2d59b6bb328c02266851221645b33ff94bb Mon Sep 17 00:00:00 2001
From: Taus <tausbn@github.com>
Date: Wed, 7 Jan 2026 14:47:11 +0100
Subject: [PATCH] Python: Use correct first parameter name for zstd call

Co-authored-by: yoff <yoff@github.com>
---
 .../experimental/semmle/python/security/DecompressionBomb.qll   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll b/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll
index 87a47ebeb00..f05e5826420 100644
--- a/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll
+++ b/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll
@@ -381,7 +381,7 @@ module Zstd {
   class DecompressionSink extends DecompressionBomb::Sink {
     DecompressionSink() {
       exists(API::CallNode zstdCall | zstdCall = zstdInstance().getACall() |
-        this = zstdCall.getParameter(0, "filename").asSink() and
+        this = zstdCall.getParameter(0, "file").asSink() and
         (
           not exists(
             zstdCall