hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Change name/id to Decompression Bomb

Browse Source 
The old title/id matches how we used to write queries, but I think just
using the normal conversational name is easier for everyone :)
This commit is contained in:
Rasmus Wriedt Larsen
2024-02-14 14:54:25 +01:00
parent 69c8ef9898
commit e5bd633028
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/experimental/Security/CWE-409/DecompressionBombs.ql
View File

@@ -1,11 +1,11 @@
/**
* @name Uncontrolled file decompression
* @name Decompression Bomb
* @description Uncontrolled data that flows into decompression library APIs without checking the compression rate is dangerous
* @kind path-problem
* @problem.severity error
* @security-severity 7.8
* @precision high
* @id py/uncontrolled-file-decompression
* @id py/decompression-bomb
* @tags security
* experimental
* external/cwe/cwe-409