hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

finilize tests for zlib

Browse Source
This commit is contained in:
am0o0
2024-09-03 09:12:54 +02:00
parent f97b1039cd
commit 8c1c537150
4 changed files with 118 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/DecompressionBombs.ql
View File

@@ -22,7 +22,7 @@ module DecompressionTaintConfig implements DataFlow::ConfigSig {
predicate isSink(DataFlow::Node sink) {
exists(FunctionCall fc, DecompressionFunction f | fc.getTarget() = f |
fc.getArgument(f.getArchiveParameterIndex()) = sink.asExpr()
fc.getArgument(f.getArchiveParameterIndex()) = [sink.asExpr(), sink.asIndirectExpr()]
)
}

2
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/ZlibUncompress.qll
View File

@@ -13,5 +13,5 @@ import DecompressionBomb
class UncompressFunction extends DecompressionFunction {
UncompressFunction() { this.hasGlobalName(["uncompress", "uncompress2"]) }
override int getArchiveParameterIndex() { result = 0 }
override int getArchiveParameterIndex() { result = 2 }
}