hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Use StringValue instead of Value::forString

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2020-02-17 14:35:18 +01:00
parent 6d5a8e4995
commit f3ab52b1fe
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/Security/CWE-022/TarSlip.ql
View File

@@ -40,7 +40,7 @@ class TarfileOpen extends TaintSource {
* this tarfile is safe.
*/
not this.(CallNode).getAnArg().pointsTo(Value::forString(_)) and
not this.(CallNode).getAnArg().pointsTo(any(StringValue str)) and
/* Ignore opens within the tarfile module itself */
not this.(ControlFlowNode).getLocation().getFile().getBaseName() = "tarfile.py"
}