From 9d130f1466d0c317f99feb924f2fedbc53bd0e49 Mon Sep 17 00:00:00 2001 From: Michael Hohn Date: Thu, 23 Jul 2020 10:42:47 -0700 Subject: [PATCH] minor --- SqlInjection.ql | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/SqlInjection.ql b/SqlInjection.ql index 2c458c0..89db3c3 100644 --- a/SqlInjection.ql +++ b/SqlInjection.ql @@ -34,8 +34,7 @@ class SqliFlowConfig extends TaintTracking::Configuration { exists(FunctionCall printf | printf.getTarget().getName().matches("%snprintf%") and printf.getArgument(0) = out.(DataFlow::PostUpdateNode).getPreUpdateNode().asExpr() and - // very specific: shifted index for macro. We can generalize this to consider - // all trailing arguments as sources. + // very specific: shifted index for macro. printf.getArgument(6) = into.asExpr() ) }