From 5929f66efb9bc0108529cafc827bf17942ad53cb Mon Sep 17 00:00:00 2001 From: edvraa <80588099+edvraa@users.noreply.github.com> Date: Thu, 13 May 2021 15:12:55 +0300 Subject: [PATCH] No need for Function f --- ql/src/experimental/CWE-1004/AuthCookie.qll | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ql/src/experimental/CWE-1004/AuthCookie.qll b/ql/src/experimental/CWE-1004/AuthCookie.qll index e42384eb3f6..f600f32f5bc 100644 --- a/ql/src/experimental/CWE-1004/AuthCookie.qll +++ b/ql/src/experimental/CWE-1004/AuthCookie.qll @@ -174,8 +174,8 @@ class GorillaCookieStoreSaveTrackingConfiguration extends DataFlow::Configuratio override predicate isSink(DataFlow::Node sink) { sink instanceof GorillaSessionSaveSink } override predicate isAdditionalFlowStep(DataFlow::Node pred, DataFlow::Node succ) { - exists(Function f, DataFlow::CallNode cn | cn = f.getACall() | - f.getQualifiedName() = "github.com/gorilla/sessions.CookieStore.Get" and + exists(DataFlow::CallNode cn | + cn.getTarget().getQualifiedName() = "github.com/gorilla/sessions.CookieStore.Get" and pred = cn.getReceiver() and succ = cn.getResult(0) )