Python: Use correct first parameter name for zstd call

tausbn · yoff · web-flow · commit 8602a2d59b6b · 2026-01-07T14:47:11.000+01:00
Co-authored-by: yoff &lt;yoff@github.com&gt;
diff --git a/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll b/python/ql/src/experimental/semmle/python/security/DecompressionBomb.qll
@@ -381,7 +381,7 @@ module Zstd {
   class DecompressionSink extends DecompressionBomb::Sink {
     DecompressionSink() {
       exists(API::CallNode zstdCall | zstdCall = zstdInstance().getACall() |
-        this = zstdCall.getParameter(0, "filename").asSink() and
+        this = zstdCall.getParameter(0, "file").asSink() and
         (
           not exists(
             zstdCall

Original file line number	Diff line number	Diff line change
`@@ -381,7 +381,7 @@ module Zstd {`
`381`	`381`	`class DecompressionSink extends DecompressionBomb::Sink {`
`382`	`382`	`DecompressionSink() {`
`383`	`383`	`exists(API::CallNode zstdCall \| zstdCall = zstdInstance().getACall() \|`
`384`		`- this = zstdCall.getParameter(0, "filename").asSink() and`
	`384`	`+ this = zstdCall.getParameter(0, "file").asSink() and`
`385`	`385`	`(`
`386`	`386`	`not exists(`
`387`	`387`	`zstdCall`