hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Data flow: Improve doc for defaultImplicitTaintRead.

Browse Source
This commit is contained in:
Geoffrey White
2025-02-28 09:37:24 +00:00
parent f7d95e4dcb
commit 1b35c0b7c9
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
shared/dataflow/codeql/dataflow/TaintTracking.qll
View File

@@ -26,7 +26,11 @@ signature module InputSig<LocationSig Location, DF::InputSig<Location> Lang> {
/**
* Holds if taint flow configurations should allow implicit reads of `c` at sinks
* and inputs to additional taint steps.
* and inputs to additional taint steps defined in the flow `Config`.
*
* Note that this (deliberately) does not include at additional taint steps defined
* globally in `defaultAdditionalTaintStep`. These models are expected to be precise
* and therefore to not require implicit reads.
*/
bindingset[node]
predicate defaultImplicitTaintRead(Lang::Node node, Lang::ContentSet c);