We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 94a9b3e commit f5329a3Copy full SHA for f5329a3
python/ql/src/Security/CWE-022/TarSlip.ql
@@ -81,11 +81,11 @@ class ExcludeTarFilePy extends Sanitizer {
81
82
/* Any call to an extractall method */
83
class ExtractAllSink extends TaintSink {
84
- CallNode call;
85
-
86
ExtractAllSink() {
87
- this = call.getFunction().(AttrNode).getObject("extractall") and
88
- not exists(call.getAnArg())
+ exists(CallNode call |
+ this = call.getFunction().(AttrNode).getObject("extractall") and
+ not exists(call.getAnArg())
+ )
89
}
90
91
override predicate sinks(TaintKind kind) { kind instanceof OpenTarFile }
0 commit comments