codeql icon indicating copy to clipboard operation
codeql copied to clipboard

C#: Decompression Bombs

Open am0o0 opened this issue 2 years ago • 6 comments

In this pull request, I've also added some valuable remote flow sources that I thought were related to my query because mostly it needs a file upload from Forms as a User Remote Source.

I don't know how can I add test cases, I only added tests in a test sub-directory.

am0o0 avatar Jun 24 '23 15:06 am0o0

Anyone not watching the repo in general, note this is part of a family of submissions:

https://github.com/github/codeql/pull/13553 https://github.com/github/codeql/pull/13554 https://github.com/github/codeql/pull/13555 https://github.com/github/codeql/pull/13556 https://github.com/github/codeql/pull/13557 https://github.com/github/codeql/pull/13558

smowton avatar Jun 24 '23 17:06 smowton

Anyone not watching the repo in general, note this is part of a family of submissions:

#13553 #13554 #13555 #13556 #13557 #13558

#13560 is added too

am0o0 avatar Jun 25 '23 10:06 am0o0

QHelp previews:

csharp/ql/src/experimental/CWE-502-DecompressionBombs/DecompressionBombs.qhelp

errors/warnings:

A fatal error occurred: Failed to read path ./csharp/ql/src/experimental/CWE-502-DecompressionBombs/DecompressionBombs.ql
(eventual cause: NoSuchFileException "./csharp/ql/src/experimental/CWE-502-DecompressionBombs/DecompressionBombs.ql")

github-actions[bot] avatar Jun 25 '23 18:06 github-actions[bot]

Hi, I've completed the work on this query and I don't have any further updates/commits here.

am0o0 avatar Jun 26 '23 11:06 am0o0

QHelp previews:

csharp/ql/src/experimental/CWE-502-DecompressionBombs/DecompressionBombs.qhelp

errors/warnings:

/home/runner/work/codeql/codeql/csharp/ql/src/experimental/CWE-502-DecompressionBombs/DecompressionBombs.qhelp:19:13: element "references" not allowed here; expected the element end-tag or element "blockquote", "img", "include", "ol", "p", "pre", "sample", "table", "ul" or "warning"
/home/runner/work/codeql/codeql/csharp/ql/src/experimental/CWE-502-DecompressionBombs/DecompressionBombs.qhelp:26:3: The element type "example" must be terminated by the matching end-tag "</example>".
A fatal error occurred: 1 qhelp files could not be processed.

github-actions[bot] avatar Jun 27 '23 13:06 github-actions[bot]

please note that this is not a part of security lab bug bounty submissions.

am0o0 avatar Jun 28 '24 17:06 am0o0