hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 22:32:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

No need for Function f

Browse Source
This commit is contained in:
edvraa
2021-05-13 15:12:55 +03:00
committed by Owen Mansel-Chan
parent 06c328c5aa
commit 5929f66efb
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ql/src/experimental/CWE-1004/AuthCookie.qll
View File

@@ -174,8 +174,8 @@ class GorillaCookieStoreSaveTrackingConfiguration extends DataFlow::Configuratio
override predicate isSink(DataFlow::Node sink) { sink instanceof GorillaSessionSaveSink }
override predicate isAdditionalFlowStep(DataFlow::Node pred, DataFlow::Node succ) {
exists(Function f, DataFlow::CallNode cn | cn = f.getACall() |
f.getQualifiedName() = "github.com/gorilla/sessions.CookieStore.Get" and
exists(DataFlow::CallNode cn |
cn.getTarget().getQualifiedName() = "github.com/gorilla/sessions.CookieStore.Get" and
pred = cn.getReceiver() and
succ = cn.getResult(0)
)