Crypto: Simplifying expression for ql-for-ql alert.

This commit is contained in:
REDMOND\brodes
2025-10-24 14:08:25 -04:00
parent 0394816756
commit 65d0ca9e53

View File

@@ -109,7 +109,7 @@ module WrapperArgFlowConfig implements DataFlow::ConfigSig {
predicate isBarrierOut(DataFlow::Node node) {
// stop all flow out of a call return
// TODO: this might be too strict and remove taint flow, need to reassess
exists(Call c | c = node.asExpr()) or
node.asExpr() instanceof Call or
node = any(Crypto::FlowAwareElement element).getInputNode()
}