mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
17 lines
1.9 KiB
Plaintext
17 lines
1.9 KiB
Plaintext
edges
|
|
| decompression_api.rb:3:31:3:36 | call to params : | decompression_api.rb:3:31:3:44 | ...[...] |
|
|
| decompression_api.rb:13:44:13:49 | call to params : | decompression_api.rb:13:44:13:57 | ...[...] |
|
|
| decompression_api.rb:17:24:17:29 | call to params : | decompression_api.rb:17:24:17:37 | ...[...] |
|
|
nodes
|
|
| decompression_api.rb:3:31:3:36 | call to params : | semmle.label | call to params : |
|
|
| decompression_api.rb:3:31:3:44 | ...[...] | semmle.label | ...[...] |
|
|
| decompression_api.rb:13:44:13:49 | call to params : | semmle.label | call to params : |
|
|
| decompression_api.rb:13:44:13:57 | ...[...] | semmle.label | ...[...] |
|
|
| decompression_api.rb:17:24:17:29 | call to params : | semmle.label | call to params : |
|
|
| decompression_api.rb:17:24:17:37 | ...[...] | semmle.label | ...[...] |
|
|
subpaths
|
|
#select
|
|
| decompression_api.rb:3:31:3:44 | ...[...] | decompression_api.rb:3:31:3:36 | call to params : | decompression_api.rb:3:31:3:44 | ...[...] | This call to $@ is unsafe because user-controlled data is used to set the object being decompressed, which could lead to a denial of service attack or malicious code extracted from an unknown source. | call to inflate | call to inflate |
|
|
| decompression_api.rb:13:44:13:57 | ...[...] | decompression_api.rb:13:44:13:49 | call to params : | decompression_api.rb:13:44:13:57 | ...[...] | This call to $@ is unsafe because user-controlled data is used to set the object being decompressed, which could lead to a denial of service attack or malicious code extracted from an unknown source. | call to inflate | call to inflate |
|
|
| decompression_api.rb:17:24:17:37 | ...[...] | decompression_api.rb:17:24:17:29 | call to params : | decompression_api.rb:17:24:17:37 | ...[...] | This call to $@ is unsafe because user-controlled data is used to set the object being decompressed, which could lead to a denial of service attack or malicious code extracted from an unknown source. | call to open | call to open |
|