From d370b2a51ed80fff458fc875314032a17f904a45 Mon Sep 17 00:00:00 2001 From: erik-krogh Date: Tue, 4 Oct 2022 13:49:50 +0200 Subject: [PATCH] simplify the where clause of `rb/kernel-open` --- ruby/ql/src/queries/security/cwe-078/KernelOpen.ql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ruby/ql/src/queries/security/cwe-078/KernelOpen.ql b/ruby/ql/src/queries/security/cwe-078/KernelOpen.ql index a292a28a70c..fb0153bdd1e 100644 --- a/ruby/ql/src/queries/security/cwe-078/KernelOpen.ql +++ b/ruby/ql/src/queries/security/cwe-078/KernelOpen.ql @@ -71,7 +71,7 @@ from where config.hasFlowPath(source, sink) and sourceNode = source.getNode() and - call.asExpr().getExpr().(MethodCall).getArgument(0) = sink.getNode().asExpr().getExpr() + call.getArgument(0) = sink.getNode() select sink.getNode(), source, sink, "This call to " + call.(Replacement).getFrom() + " depends on a . Replace it with " + call.(Replacement).getTo() + ".", source.getNode(), "user-provided value"