Skip to content

Commit 67b6f21

Browse files
yoffRasmusWL
andauthored
Apply suggestions from code review
Co-authored-by: Rasmus Wriedt Larsen <[email protected]>
1 parent 9e154ff commit 67b6f21

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

python/ql/lib/semmle/python/security/dataflow/TarSlipCustomizations.qll

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -112,8 +112,9 @@ module TarSlip {
112112
/**
113113
* A sanitizer guard heuristic.
114114
*
115-
* For a "check-like function-name" (matching `"%path"`), `checkPath`,
116-
* and a call `checkPath(info.name)`, the variable `info` is considered checked.
115+
* The test `if <check_path>(info.name)` should clear taint for `info`,
116+
* where `<check_path>` is any function matching `"%path"`.
117+
* `info` is assumed to be a `TarInfo` instance.
117118
*/
118119
class TarFileInfoSanitizer extends SanitizerGuard {
119120
ControlFlowNode tarInfo;

0 commit comments

Comments
 (0)