hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-05 07:06:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

Only consider store steps

Browse Source
This commit is contained in:
Benjamin Muskalla
2021-11-16 10:46:24 +01:00
parent fd9199c0c0
commit 0e6bb28016
2 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/utils/model-generator/CaptureSummaryModels.ql
View File

@@ -158,9 +158,9 @@ class ParameterToReturnValueTaintConfig extends TaintTracking::Configuration {
override predicate isSink(DataFlow::Node sink) { sink instanceof ReturnNode }
// track taint across objects so we consider factory methods returning newly tainted objects
// consider store steps to track taint across objects to model factory methods returning tainted objects
override predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) {
node2.asExpr().(ConstructorCall).getAnArgument() = node1.asExpr()
store(node1, _, node2, _)
}
override DataFlow::FlowFeature getAFeature() {