Skip to content

Commit 863fa36

Browse files
committed
remove CLI sources Library file & unused file system sinks
1 parent bb8063c commit 863fa36

3 files changed

Lines changed: 0 additions & 261 deletions

File tree

java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/ApacheCommonsUploadFileDemo.ql

Lines changed: 0 additions & 31 deletions
This file was deleted.

java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/CommandLineSource.qll

Lines changed: 0 additions & 187 deletions
This file was deleted.

java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/RemoteSource.qll

Lines changed: 0 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -10,49 +10,6 @@ class CommonsFileUploadAdditionalTaintStep extends Unit {
1010
}
1111

1212
module ApacheCommonsFileUpload {
13-
module DangerousSink {
14-
class TypeDiskFileItemFactory extends RefType {
15-
TypeDiskFileItemFactory() {
16-
this.getAStrictAncestor*()
17-
.hasQualifiedName("org.apache.commons.fileupload.disk", "DiskFileItemFactory")
18-
or
19-
this.getAStrictAncestor*()
20-
.hasQualifiedName("org.apache.commons.fileupload", "FileItemFactory")
21-
}
22-
}
23-
24-
abstract class FileWriteSink extends MethodAccess {
25-
abstract Expr getAPathArgument();
26-
}
27-
28-
class FileItemWrite extends FileWriteSink {
29-
FileItemWrite() {
30-
this.getReceiverType() instanceof RemoteFlowSource::TypeFileUpload and
31-
this.getCallee().hasName(["write"])
32-
}
33-
34-
override Expr getAPathArgument() { result = this.getArgument(0) }
35-
}
36-
37-
class DiskFileItemFactoryCreateItem extends FileWriteSink {
38-
DiskFileItemFactoryCreateItem() {
39-
this.getReceiverType() instanceof TypeDiskFileItemFactory and
40-
this.getCallee().hasName(["createItem"])
41-
}
42-
43-
override Expr getAPathArgument() { result = this.getArgument(3) }
44-
}
45-
46-
class DiskFileItemFactorySetRepository extends FileWriteSink {
47-
DiskFileItemFactorySetRepository() {
48-
this.getReceiverType() instanceof TypeDiskFileItemFactory and
49-
this.getCallee().hasName(["setRepository"])
50-
}
51-
52-
override Expr getAPathArgument() { result = this.getArgument(0) }
53-
}
54-
}
55-
5613
module RemoteFlowSource {
5714
class TypeServletFileUpload extends RefType {
5815
TypeServletFileUpload() {

0 commit comments

Comments
 (0)