hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 06:12:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #252 from gagliardetto/patch-3

Browse Source 
taint-tracking: String() must return a string type
This commit is contained in:
Max Schaefer
2020-07-08 12:01:20 +01:00
committed by GitHub
parent bc778b5899 59071732a8
commit 26eeb3c658
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ql/src/semmle/go/frameworks/Stdlib.qll
View File

@@ -6,7 +6,11 @@ import go
/** A `String()` method. */
class StringMethod extends TaintTracking::FunctionModel, Method {
StringMethod() { getName() = "String" and getNumParameter() = 0 }
StringMethod() {
getName() = "String" and
getNumParameter() = 0 and
getResultType(0) = Builtin::string_().getType()
}
override predicate hasTaintFlow(FunctionInput inp, FunctionOutput outp) {
inp.isReceiver() and outp.isResult()