hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-23 20:26:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'mathiasvp/replace-ast-with-ir-use-usedataflow' into no-taint-indirect-direct-conflation

Browse Source
This commit is contained in:
Mathias Vorreiter Pedersen
2023-02-27 18:40:04 +00:00
parent 7bb806563f f9c724d9a3
commit 3906a1923b
2 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cpp/ql/lib/semmle/code/cpp/dataflow/new/TaintTracking.qll
View File

@@ -15,8 +15,8 @@
* `TaintTracking::localTaintStep` with arguments of type `DataFlow::Node`. * `TaintTracking::localTaintStep` with arguments of type `DataFlow::Node`.
*/ */
import semmle.code.cpp.ir.dataflow.DataFlow import semmle.code.cpp.dataflow.new.DataFlow
import semmle.code.cpp.ir.dataflow.DataFlow2 import semmle.code.cpp.dataflow.new.DataFlow2
/** /**
* Provides classes for performing local (intra-procedural) and * Provides classes for performing local (intra-procedural) and

9
cpp/ql/lib/semmle/code/cpp/models/implementations/Gets.qll
View File

@@ -97,10 +97,11 @@ private class GetsFunction extends DataFlowFunction, ArrayFunction, AliasFunctio
} }
override predicate hasLocalFlowSource(FunctionOutput output, string description) { override predicate hasLocalFlowSource(FunctionOutput output, string description) {
output.isParameterDeref(0) and (
description = "string read by " + this.getName() output.isParameterDeref(0) or
or output.isReturnValue() or
output.isReturnValue() and output.isReturnValueDeref()
) and
description = "string read by " + this.getName() description = "string read by " + this.getName()
} }