Skip to content

Commit 9d00fd7

Browse files
committed
Convert one zip slip barrier to MaD
1 parent b575195 commit 9d00fd7

File tree

2 files changed

+5
-12
lines changed

2 files changed

+5
-12
lines changed

go/ql/lib/ext/archive.zip.model.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: barrierModel
5+
data:
6+
- ["archive/zip", "File", True, "Open", "", "", "ReturnValue[0]", "go/zipslip", "manual"]
27
- addsTo:
38
pack: codeql/go-all
49
extensible: summaryModel

go/ql/lib/semmle/go/security/ZipSlipCustomizations.qll

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -53,18 +53,6 @@ module ZipSlip {
5353
}
5454
}
5555

56-
/**
57-
* A zipped file, excluded from for zip slip.
58-
*/
59-
class ZipFileOpen extends Sanitizer {
60-
ZipFileOpen() {
61-
this =
62-
any(DataFlow::MethodCallNode mcn |
63-
mcn.getTarget().hasQualifiedName("archive/zip", "File", "Open")
64-
).getResult(0)
65-
}
66-
}
67-
6856
/** A path-traversal sink, considered as a taint sink for zip slip. */
6957
class TaintedPathSinkAsSink extends Sink instanceof TaintedPath::Sink {
7058
TaintedPathSinkAsSink() {

0 commit comments

Comments
 (0)