Skip to content

Commit e421c49

Browse files
committed
fix multipart mistake :(
1 parent bd1ee9b commit e421c49

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

go/ql/src/experimental/CWE-522-DecompressionBombs/MultipartAndFormRemoteSource.qll

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,17 +4,16 @@ import semmle.go.dataflow.Properties
44
class MimeMultipartFileHeader extends UntrustedFlowSource::Range {
55
MimeMultipartFileHeader() {
66
exists(DataFlow::FieldReadNode frn | this = frn |
7-
frn.getField()
8-
.hasQualifiedName("mime/multipart.FileHeader", ["Filename", "Header"], "RequestBody")
7+
frn.getField().hasQualifiedName("mime/multipart", "FileHeader", ["Filename", "Header"])
98
)
109
or
1110
exists(DataFlow::Method m |
12-
m.hasQualifiedName("mime/multipart.FileHeader", "Open") and
11+
m.hasQualifiedName("mime/multipart", "FileHeader", "Open") and
1312
this = m.getACall().getResult(0)
1413
)
1514
or
1615
exists(DataFlow::FieldReadNode frn |
17-
frn.getField().hasQualifiedName("mime/multipart.Form", "Value")
16+
frn.getField().hasQualifiedName("mime/multipart", "Form", "Value")
1817
)
1918
}
2019
}

0 commit comments

Comments
 (0)