C++: Fix barrier in cpp/cgi-xss

2026-04-24 16:25:15 +02:00 · 2023-10-13 14:05:47 +02:00
parent 3b777c2764
commit 61676277e8
1 changed files with 3 additions and 1 deletions
--- a/cpp/ql/src/Security/CWE/CWE-079/CgiXss.ql
+++ b/cpp/ql/src/Security/CWE/CWE-079/CgiXss.ql
@@ -35,7 +35,9 @@ module Config implements DataFlow::ConfigSig {
  }

  predicate isBarrier(DataFlow::Node node) {
-    node.asExpr().getUnspecifiedType() instanceof IntegralType
+    isSink(node) and node.asExpr().getUnspecifiedType() instanceof ArithmeticType
+    or
+    node.asInstruction().(StoreInstruction).getResultType() instanceof ArithmeticType
  }
 }