File tree Expand file tree Collapse file tree 1 file changed +3
-11
lines changed
python/ql/lib/semmle/python/frameworks Expand file tree Collapse file tree 1 file changed +3
-11
lines changed Original file line number Diff line number Diff line change @@ -447,23 +447,15 @@ private module StdlibPrivate {
447
447
// ---------------------------------------------------------------------------
448
448
// pickle
449
449
// ---------------------------------------------------------------------------
450
- /** Gets a reference to the `pickle` module. */
451
- DataFlow:: Node pickle ( ) { result = API:: moduleImport ( [ "pickle" , "cPickle" , "_pickle" ] ) .getAUse ( ) }
452
-
453
- /** Provides models for the `pickle` module. */
454
- module pickle {
455
- /** Gets a reference to the `pickle.loads` function. */
456
- DataFlow:: Node loads ( ) {
457
- result = API:: moduleImport ( [ "pickle" , "cPickle" , "_pickle" ] ) .getMember ( "loads" ) .getAUse ( )
458
- }
459
- }
450
+ /** Gets a reference to any of the `pickle` modules. */
451
+ API:: Node pickle ( ) { result = API:: moduleImport ( [ "pickle" , "cPickle" , "_pickle" ] ) }
460
452
461
453
/**
462
454
* A call to `pickle.loads`
463
455
* See https://docs.python.org/3/library/pickle.html#pickle.loads
464
456
*/
465
457
private class PickleLoadsCall extends Decoding:: Range , DataFlow:: CallCfgNode {
466
- PickleLoadsCall ( ) { this . getFunction ( ) = pickle:: loads ( ) }
458
+ PickleLoadsCall ( ) { this = pickle ( ) . getMember ( " loads" ) . getACall ( ) }
467
459
468
460
override predicate mayExecuteInput ( ) { any ( ) }
469
461
You can’t perform that action at this time.
0 commit comments