Skip to content

Commit 700e40b

Browse files
committed
Python: Fix ql4ql
1 parent 4f3876f commit 700e40b

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

python/ql/src/Security/CWE-020-ExternalAPIs/ExternalAPIs.qll

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -158,9 +158,7 @@ class UnresolvedCall extends InterestingExternalApiCall, TUnresolvedCall {
158158
/** A node representing data being passed to an external API through a call. */
159159
class ExternalApiDataNode extends DataFlow::Node {
160160
ExternalApiDataNode() {
161-
exists(InterestingExternalApiCall call, DataFlowPrivate::ArgumentPosition apos |
162-
this = call.getArgument(apos)
163-
) and
161+
exists(InterestingExternalApiCall call | this = call.getArgument(_)) and
164162
// Not already modeled as a taint step
165163
not TaintTrackingPrivate::defaultAdditionalTaintStep(this, _) and
166164
// for `list.append(x)`, we have a additional taint step from x -> [post] list.

0 commit comments

Comments
 (0)