we don't need TypeInputStreamConstructorArgumentSink anymore

2026-04-25 16:55:19 +02:00 · 2024-07-28 12:09:52 +02:00
parent 7689db7d42
commit cc752113af
1 changed files with 0 additions and 8 deletions
--- a/java/ql/src/experimental/semmle/code/java/security/DecompressionBomb.qll
+++ b/java/ql/src/experimental/semmle/code/java/security/DecompressionBomb.qll
@@ -25,14 +25,6 @@ module DecompressionBomb {
  }

  abstract class BombTypeInputStream extends RefType { }
-
-  private class TypeInputStreamConstructorArgumentSink extends DecompressionBomb::Sink {
-    TypeInputStreamConstructorArgumentSink() {
-      exists(ConstructorCall call | call.getConstructedType() instanceof BombTypeInputStream |
-        this.asExpr() = call.getArgument(0)
-      )
-    }
-  }
 }

 /**