File tree Expand file tree Collapse file tree 4 files changed +8
-8
lines changed
cpp/ql/src/experimental/Security/CWE/CWE-409 Expand file tree Collapse file tree 4 files changed +8
-8
lines changed Original file line number Diff line number Diff line change @@ -6,7 +6,8 @@ import cpp
6
6
import DecompressionBomb
7
7
8
8
/**
9
- * The `BrotliDecoderDecompress` function is used in flow sink. * Ref: https://www.brotli.org/decode.html#af68
9
+ * The `BrotliDecoderDecompress` function is used in flow sink.
10
+ * See https://www.brotli.org/decode.html.
10
11
*/
11
12
class BrotliDecoderDecompressFunction extends DecompressionFunction {
12
13
BrotliDecoderDecompressFunction ( ) { this .hasGlobalName ( "BrotliDecoderDecompress" ) }
@@ -15,7 +16,8 @@ class BrotliDecoderDecompressFunction extends DecompressionFunction {
15
16
}
16
17
17
18
/**
18
- * The `BrotliDecoderDecompressStream` function is used in flow sink. * Ref: https://www.brotli.org/decode.html#a234
19
+ * The `BrotliDecoderDecompressStream` function is used in flow sink.
20
+ * See https://www.brotli.org/decode.html.
19
21
*/
20
22
class BrotliDecoderDecompressStreamFunction extends DecompressionFunction {
21
23
BrotliDecoderDecompressStreamFunction ( ) { this .hasGlobalName ( "BrotliDecoderDecompressStream" ) }
Original file line number Diff line number Diff line change 3
3
* @description User-controlled data that flows into decompression library APIs without checking the compression rate is dangerous
4
4
* @kind path-problem
5
5
* @problem.severity error
6
- * @security-severity 7.8
7
6
* @precision high
8
- * @id cpp/data-decompression
7
+ * @id cpp/data-decompression-bomb
9
8
* @tags security
10
9
* experimental
11
10
* external/cwe/cwe-409
12
11
*/
13
12
14
13
import cpp
15
- import semmle.code.cpp.ir.dataflow.TaintTracking
16
14
import semmle.code.cpp.security.FlowSources
17
15
import DecompressionBomb
18
16
Original file line number Diff line number Diff line change @@ -7,7 +7,7 @@ import DecompressionBomb
7
7
8
8
/**
9
9
* The `archive_read_data*` functions are used in flow sink.
10
- * [Examples]( https://github.com/libarchive/libarchive/wiki/Examples)
10
+ * See https://github.com/libarchive/libarchive/wiki/Examples.
11
11
*/
12
12
class Archive_read_data_block extends DecompressionFunction {
13
13
Archive_read_data_block ( ) {
Original file line number Diff line number Diff line change @@ -7,7 +7,7 @@ import DecompressionBomb
7
7
8
8
/**
9
9
* The `mz_zip_entry` function is used in flow sink.
10
- * [docuemnt]( https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip.md)
10
+ * See https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip.md.
11
11
*/
12
12
class Mz_zip_entry extends DecompressionFunction {
13
13
Mz_zip_entry ( ) { this .hasGlobalName ( "mz_zip_entry_read" ) }
@@ -17,7 +17,7 @@ class Mz_zip_entry extends DecompressionFunction {
17
17
18
18
/**
19
19
* The `mz_zip_reader_entry_*` and `mz_zip_reader_save_all` functions are used in flow sink.
20
- * [docuemnt]( https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip_rw.md)
20
+ * See https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip_rw.md.
21
21
*/
22
22
class Mz_zip_reader_entry extends DecompressionFunction {
23
23
Mz_zip_reader_entry ( ) {
You can’t perform that action at this time.
0 commit comments