Python: Use helper predicate

Since the helper predicate had nice qldocs
This commit is contained in:
Rasmus Wriedt Larsen
2024-02-14 13:52:12 +01:00
parent e7772f1062
commit d8fd457310

View File

@@ -54,12 +54,7 @@ module ZipFile {
exists(API::Node zipOpen | zipOpen = zipFileClass().getReturn().getMember("open") |
// this open function must reads uncompressed data with buffer
// and checks the accumulated size at the end of each read to be called safe
not TaintTracking::localExprTaint(zipOpen
.getReturn()
.getMember("read")
.getParameter(0)
.asSink()
.asExpr(), any(Compare i).getASubExpression*()) and
not zipFileDecompressionBombSanitizer(zipOpen) and
this = zipOpen.getACall()
)
}