Update python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql

Sim4n6 · yoff · web-flow · commit 0ed480855a8b · 2023-01-25T19:44:28.000+01:00
Yes, definitely

Co-authored-by: yoff &lt;lerchedahl@gmail.com&gt;
diff --git a/python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql b/python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql
@@ -69,8 +69,7 @@ class UnsafeUnpackingConfig extends TaintTracking::Configuration {
     // Writing the response data to the archive
     exists(Stdlib::FileLikeObject::InstanceSource is, Node f, MethodCallNode mc |
       is.flowsTo(f) and
-      mc.getMethodName() = "write" and
-      f = mc.getObject() and
+      mc.calls(f, "write")
       nodeFrom = mc.getArg(0) and
       nodeTo = is.(CallCfgNode).getArg(0)
     )
