C#: Remove a Cartesian product

2026-05-01 03:35:13 +02:00 · 2019-12-06 10:42:59 +00:00
parent a3efcf66a6
commit 3a95cd5e9c
1 changed files with 1 additions and 0 deletions
--- a/csharp/ql/src/semmle/code/csharp/dataflow/internal/TaintTrackingPrivate.qll
+++ b/csharp/ql/src/semmle/code/csharp/dataflow/internal/TaintTrackingPrivate.qll
@@ -117,6 +117,7 @@ private class LocalTaintExprStepConfiguration extends ControlFlowReachabilityCon
      e2 = any(OperatorCall oc |
          oc.getTarget().(ConversionOperator).fromLibrary() and
          e1 = oc.getAnArgument() and
+          scope = e2 and
          isSuccessor = true
        )
    )