diff --git a/python/ql/src/Security/CWE-022/TarSlip.ql b/python/ql/src/Security/CWE-022/TarSlip.ql index 22bc76697de..76d799a0aca 100644 --- a/python/ql/src/Security/CWE-022/TarSlip.ql +++ b/python/ql/src/Security/CWE-022/TarSlip.ql @@ -81,11 +81,11 @@ class ExcludeTarFilePy extends Sanitizer { /* Any call to an extractall method */ class ExtractAllSink extends TaintSink { - CallNode call; - ExtractAllSink() { - this = call.getFunction().(AttrNode).getObject("extractall") and - not exists(call.getAnArg()) + exists(CallNode call | + this = call.getFunction().(AttrNode).getObject("extractall") and + not exists(call.getAnArg()) + ) } override predicate sinks(TaintKind kind) { kind instanceof OpenTarFile }