File tree Expand file tree Collapse file tree 4 files changed +8
-8
lines changed
cpp/ql/src/experimental/Security/CWE/CWE-409 Expand file tree Collapse file tree 4 files changed +8
-8
lines changed Original file line number Diff line number Diff line change @@ -6,7 +6,8 @@ import cpp
66import DecompressionBomb
77
88/**
9- * The `BrotliDecoderDecompress` function is used in flow sink. * Ref: https://www.brotli.org/decode.html#af68
9+ * The `BrotliDecoderDecompress` function is used in flow sink.
10+ * See https://www.brotli.org/decode.html.
1011 */
1112class BrotliDecoderDecompressFunction extends DecompressionFunction {
1213 BrotliDecoderDecompressFunction ( ) { this .hasGlobalName ( "BrotliDecoderDecompress" ) }
@@ -15,7 +16,8 @@ class BrotliDecoderDecompressFunction extends DecompressionFunction {
1516}
1617
1718/**
18- * The `BrotliDecoderDecompressStream` function is used in flow sink. * Ref: https://www.brotli.org/decode.html#a234
19+ * The `BrotliDecoderDecompressStream` function is used in flow sink.
20+ * See https://www.brotli.org/decode.html.
1921 */
2022class BrotliDecoderDecompressStreamFunction extends DecompressionFunction {
2123 BrotliDecoderDecompressStreamFunction ( ) { this .hasGlobalName ( "BrotliDecoderDecompressStream" ) }
Original file line number Diff line number Diff line change 33 * @description User-controlled data that flows into decompression library APIs without checking the compression rate is dangerous
44 * @kind path-problem
55 * @problem.severity error
6- * @security-severity 7.8
76 * @precision high
8- * @id cpp/data-decompression
7+ * @id cpp/data-decompression-bomb
98 * @tags security
109 * experimental
1110 * external/cwe/cwe-409
1211 */
1312
1413import cpp
15- import semmle.code.cpp.ir.dataflow.TaintTracking
1614import semmle.code.cpp.security.FlowSources
1715import DecompressionBomb
1816
Original file line number Diff line number Diff line change @@ -7,7 +7,7 @@ import DecompressionBomb
77
88/**
99 * The `archive_read_data*` functions are used in flow sink.
10- * [Examples]( https://github.com/libarchive/libarchive/wiki/Examples)
10+ * See https://github.com/libarchive/libarchive/wiki/Examples.
1111 */
1212class Archive_read_data_block extends DecompressionFunction {
1313 Archive_read_data_block ( ) {
Original file line number Diff line number Diff line change @@ -7,7 +7,7 @@ import DecompressionBomb
77
88/**
99 * The `mz_zip_entry` function is used in flow sink.
10- * [docuemnt]( https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip.md)
10+ * See https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip.md.
1111 */
1212class Mz_zip_entry extends DecompressionFunction {
1313 Mz_zip_entry ( ) { this .hasGlobalName ( "mz_zip_entry_read" ) }
@@ -17,7 +17,7 @@ class Mz_zip_entry extends DecompressionFunction {
1717
1818/**
1919 * The `mz_zip_reader_entry_*` and `mz_zip_reader_save_all` functions are used in flow sink.
20- * [docuemnt]( https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip_rw.md)
20+ * See https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip_rw.md.
2121 */
2222class Mz_zip_reader_entry extends DecompressionFunction {
2323 Mz_zip_reader_entry ( ) {
You can’t perform that action at this time.
0 commit comments