Add a missing "and"

Sim4n6 · Sim4n6 · commit 2d38993075a6 · 2023-01-25T19:46:13.000+01:00
diff --git a/python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql b/python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql
@@ -69,7 +69,7 @@ class UnsafeUnpackingConfig extends TaintTracking::Configuration {
     // Writing the response data to the archive
     exists(Stdlib::FileLikeObject::InstanceSource is, Node f, MethodCallNode mc |
       is.flowsTo(f) and
-      mc.calls(f, "write")
+      mc.calls(f, "write") and
       nodeFrom = mc.getArg(0) and
       nodeTo = is.(CallCfgNode).getArg(0)
     )

Original file line number	Diff line number	Diff line change
`@@ -69,7 +69,7 @@ class UnsafeUnpackingConfig extends TaintTracking::Configuration {`
`69`	`69`	`// Writing the response data to the archive`
`70`	`70`	`exists(Stdlib::FileLikeObject::InstanceSource is, Node f, MethodCallNode mc \|`
`71`	`71`	`is.flowsTo(f) and`
`72`		`- mc.calls(f, "write")`
	`72`	`+ mc.calls(f, "write") and`
`73`	`73`	`nodeFrom = mc.getArg(0) and`
`74`	`74`	`nodeTo = is.(CallCfgNode).getArg(0)`
`75`	`75`	`)`