hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Use Unit class

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2024-02-14 13:51:59 +01:00
parent ad39b8c68b
commit e7772f1062
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll
View File

@@ -5,14 +5,13 @@ import semmle.python.ApiGraphs
import semmle.python.dataflow.new.RemoteFlowSources
import semmle.python.dataflow.new.internal.DataFlowPublic
import FileAndFormRemoteFlowSource::FileAndFormRemoteFlowSource
import codeql.util.Unit
module DecompressionBomb {
/**
* The additional taint steps that need for creating taint tracking or dataflow.
*/
abstract class AdditionalTaintStep extends string {
AdditionalTaintStep() { this = "AdditionalTaintStep" }
class AdditionalTaintStep extends Unit {
/**
* Holds if there is a additional taint step between pred and succ.
*/
@@ -98,8 +97,6 @@ module ZipFile {
* ```
*/
class DecompressionAdditionalTaintStep extends DecompressionBomb::AdditionalTaintStep {
DecompressionAdditionalTaintStep() { this = "AdditionalTaintStep" }
override predicate isAdditionalTaintStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
exists(API::Node zipFileInstance | zipFileInstance = zipFileClass() |
nodeFrom =
@@ -172,8 +169,6 @@ module TarFile {
* The Additional taint steps that are necessary for data flow query
*/
class DecompressionAdditionalTaintStep extends DecompressionBomb::AdditionalTaintStep {
DecompressionAdditionalTaintStep() { this = "AdditionalTaintStep" }
override predicate isAdditionalTaintStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
exists(API::Node tarfileInstance | tarfileInstance = tarfileExtractMember() |
nodeFrom = tarfileInstance.getACall().getParameter(0, "name").asSink() and