C++: handle namespace vars in DefautlTaintTracking

2026-04-29 02:35:15 +02:00 · 2019-12-04 13:16:12 -08:00
parent d99a90bfea
commit 420a0bb74c
1 changed files with 1 additions and 1 deletions
--- a/cpp/ql/src/semmle/code/cpp/ir/dataflow/DefaultTaintTracking.qll
+++ b/cpp/ql/src/semmle/code/cpp/ir/dataflow/DefaultTaintTracking.qll
@@ -206,7 +206,7 @@ predicate taintedIncludingGlobalVars(Expr source, Element tainted, string global
    accessesVariable(load.asInstruction(), global) and
    fromCfg.hasFlow(load, sink) and
    tainted = adjustedSink(sink) and
-    globalVar = global.toString()
+    global = globalVarFromId(globalVar)
  )
 }