hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #606 from markshannon/python-fix-regex-fp

Browse Source 
Python: Fix off-by-one error in regex parsing.
This commit is contained in:
Taus
2018-12-06 12:59:44 +01:00
committed by GitHub
parent 6a7b528280 a5b79e92a5
commit cb93017d98
8 changed files with 48 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
python/ql/src/semmle/python/regex.qll
View File

@@ -565,10 +565,8 @@ abstract class RegexString extends Expr {
this.sequenceOrQualified(start, end) and not this.isOptionDivider(start-1) and
item_start = start
or
exists(int endp1 | end = endp1-1 |
start = end and not this.item_end(start) and this.isOptionDivider(endp1) and
item_start = start
)
start = end and not this.item_end(start) and this.isOptionDivider(end) and
item_start = start
or
exists(int mid |
this.subalternation(start, mid, _) and