JS: HeapTaintStep

This commit is contained in:
Asger Feldthaus
2020-03-27 15:19:35 +00:00
parent c3e00181cb
commit 3398ddf783

View File

@@ -255,13 +255,10 @@ module TaintTracking {
* A taint propagating data flow edge through object or array elements and
* promises.
*/
private class HeapTaintStep extends AdditionalTaintStep {
HeapTaintStep() { heapStep(_, this) }
private class HeapTaintStep extends SharedTaintStep {
override predicate step(DataFlow::Node pred, DataFlow::Node succ) {
Stages::Taint::ref() and
heapStep(pred, succ) and
succ = this
heapStep(pred, succ)
}
}