Skip to content

Commit 9b905d5

Browse files
committed
C++: Set precision to low
There are no barriers, so the query as is will flag up any use of the identified functions.
1 parent 238895e commit 9b905d5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

cpp/ql/src/experimental/Security/CWE/CWE-409/DecompressionBombs.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
* @description User-controlled data that flows into decompression library APIs without checking the compression rate is dangerous
44
* @kind path-problem
55
* @problem.severity error
6-
* @precision high
6+
* @precision low
77
* @id cpp/data-decompression-bomb
88
* @tags security
99
* experimental

0 commit comments

Comments
 (0)