we don't need TypeInputStreamConstructorArgumentSink anymore

am0o0 · am0o0 · commit cc752113afbe · 2024-07-28T12:09:52.000+02:00
diff --git a/java/ql/src/experimental/semmle/code/java/security/DecompressionBomb.qll b/java/ql/src/experimental/semmle/code/java/security/DecompressionBomb.qll
@@ -25,14 +25,6 @@ module DecompressionBomb {
   }
 
   abstract class BombTypeInputStream extends RefType { }
-
-  private class TypeInputStreamConstructorArgumentSink extends DecompressionBomb::Sink {
-    TypeInputStreamConstructorArgumentSink() {
-      exists(ConstructorCall call | call.getConstructedType() instanceof BombTypeInputStream |
-        this.asExpr() = call.getArgument(0)
-      )
-    }
-  }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -25,14 +25,6 @@ module DecompressionBomb {`
`25`	`25`	`}`
`26`	`26`
`27`	`27`	`abstract class BombTypeInputStream extends RefType { }`
`28`		`-`
`29`		`- private class TypeInputStreamConstructorArgumentSink extends DecompressionBomb::Sink {`
`30`		`- TypeInputStreamConstructorArgumentSink() {`
`31`		`- exists(ConstructorCall call \| call.getConstructedType() instanceof BombTypeInputStream \|`
`32`		`- this.asExpr() = call.getArgument(0)`
`33`		`- )`
`34`		`- }`
`35`		`- }`
`36`	`28`	`}`
`37`	`29`
`38`	`30`	`/**`