diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysis.qll b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysis.qll index 4d22931e4e2..684a17b58d5 100644 --- a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysis.qll +++ b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysis.qll @@ -421,12 +421,10 @@ private predicate boundFlowStep(SemExpr e2, SemExpr e1, int delta, boolean upper else none() ) or - exists(SemExpr x | - exists(SemSubExpr sub | - e2 = sub and - sub.getLeftOperand() = e1 and - sub.getRightOperand() = x - ) + exists(SemExpr x, SemSubExpr sub | + e2 = sub and + sub.getLeftOperand() = e1 and + sub.getRightOperand() = x | // `x instanceof ConstantIntegerExpr` is covered by valueFlowStep not x instanceof SemConstantIntegerExpr and