C++: Drop the size return value of strlcat from hasTaintFlow

2026-04-28 10:15:14 +02:00 · 2023-11-10 13:15:57 +01:00
parent 5e21a5d284
commit 1c87875049
1 changed files with 1 additions and 1 deletions
--- a/cpp/ql/lib/semmle/code/cpp/models/implementations/Strcat.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/implementations/Strcat.qll
@@ -124,7 +124,7 @@ class StrlcatFunction extends TaintFunction, ArrayFunction, SideEffectFunction {
      or
      input.isParameterDeref(1)
    ) and
-    (output.isParameterDeref(0) or output.isReturnValue())
+    output.isParameterDeref(0)
  }

  override predicate hasArrayInput(int param) {