mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-18 12:39:28 +00:00
16 lines
631 B
Python
16 lines
631 B
Python
|
# Provenance: Contrast-Security-OSS/vulnpy do_pickle_load (fixed).
|
||
|
|
# repo: Contrast-Security-OSS/vulnpy
|
||
|
|
# commit: d1d0f64c06f038fe59a049e0e6001bfaf9839697
|
||
|
|
# parent: d1d0f64c06f038fe59a049e0e6001bfaf9839697
|
||
|
|
# commit_url: https://github.com/Contrast-Security-OSS/vulnpy/blob/d1d0f64c06f038fe59a049e0e6001bfaf9839697/src/vulnpy/trigger/deserialization.py#L8
|
||
|
|
# cve:
|
||
|
|
# license: MIT
|
||
|
|
# function: do_pickle_load
|
||
|
|
# relpath: src/vulnpy/trigger/deserialization.py
|
||
|
|
# provenance: human
|
||
|
|
# mechanism: source_reaches_sink
|
||
|
|
|
||
|
|
def do_pickle_load(user_input):
|
||
|
|
user_input = io.BytesIO(user_input.encode("utf-8"))
|
||
|
|
return pickle.load(user_input)
|