Skip to content

Commit 0efb007

Browse files
committed
Add hasFlowToComparison to all sinks as a sanitizer
1 parent a72bd7e commit 0efb007

File tree

3 files changed

+180
-94
lines changed

3 files changed

+180
-94
lines changed

go/ql/src/experimental/CWE-522-DecompressionBombs/DecompressionBombs.ql

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ import go
1515
import MultipartAndFormRemoteSource
1616
import experimental.frameworks.DecompressionBombs
1717

18-
module DecompressionBombsConfig implements DataFlow::StateConfigSig {
18+
module Config implements DataFlow::StateConfigSig {
1919
class FlowState = DecompressionBombs::FlowState;
2020

2121
predicate isSource(DataFlow::Node source, FlowState state) {
@@ -48,11 +48,11 @@ module DecompressionBombsConfig implements DataFlow::StateConfigSig {
4848
}
4949
}
5050

51-
module DecompressionBombsFlow = TaintTracking::GlobalWithState<DecompressionBombsConfig>;
51+
module Flow = TaintTracking::GlobalWithState<Config>;
5252

53-
import DecompressionBombsFlow::PathGraph
53+
import Flow::PathGraph
5454

55-
from DecompressionBombsFlow::PathNode source, DecompressionBombsFlow::PathNode sink
56-
where DecompressionBombsFlow::flowPath(source, sink)
55+
from Flow::PathNode source, Flow::PathNode sink
56+
where Flow::flowPath(source, sink)
5757
select sink.getNode(), source, sink, "This decompression is $@.", source.getNode(),
5858
"decompressing compressed data without managing output size"

0 commit comments

Comments
 (0)