C#: Disable field-flow for ZipSlip.ql

hvitved · hvitved · commit 3be7c20683e4 · 2019-09-05T14:56:54.000+02:00
diff --git a/csharp/ql/src/semmle/code/csharp/security/dataflow/ZipSlip.qll b/csharp/ql/src/semmle/code/csharp/security/dataflow/ZipSlip.qll
@@ -40,6 +40,8 @@ module ZipSlip {
     override predicate isSanitizerGuard(DataFlow::BarrierGuard guard) {
       guard instanceof SanitizerGuard
     }
+
+    override int fieldFlowBranchLimit() { result = 0 }
   }
 
   /** An access to the `FullName` property of a `ZipArchiveEntry`. */

Original file line number	Diff line number	Diff line change
`@@ -40,6 +40,8 @@ module ZipSlip {`
`40`	`40`	`override predicate isSanitizerGuard(DataFlow::BarrierGuard guard) {`
`41`	`41`	`guard instanceof SanitizerGuard`
`42`	`42`	`}`
	`43`	`+`
	`44`	`+ override int fieldFlowBranchLimit() { result = 0 }`
`43`	`45`	`}`
`44`	`46`
`45`	`47`	/** An access to the `FullName` property of a `ZipArchiveEntry`. */