C++: Data flow through StmtExpr

2026-04-28 10:15:14 +02:00 · 2019-01-10 15:39:56 +01:00
parent a2de057c26
commit 0a57767cc6
4 changed files with 10 additions and 2 deletions
--- a/cpp/ql/src/semmle/code/cpp/dataflow/internal/DataFlowUtil.qll
+++ b/cpp/ql/src/semmle/code/cpp/dataflow/internal/DataFlowUtil.qll
@@ -275,6 +275,10 @@ private predicate exprToExprStep_nocfg(Expr fromExpr, Expr toExpr) {
    fromExpr = op.getOperand()
  )
  or
+  toExpr = any(StmtExpr stmtExpr |
+    fromExpr = stmtExpr.getResultExpr()
+  )
+  or
  toExpr = any(Call call |
    exists(DataFlowFunction f, FunctionInput inModel , FunctionOutput outModel, int iIn |
      call.getTarget() = f and