From 6fbed9037f4a04199fc27ea0c7ea9a6d38387c41 Mon Sep 17 00:00:00 2001
From: Owen Mansel-Chan <owen-mc@github.com>
Date: Wed, 26 Nov 2025 14:39:58 +0000
Subject: [PATCH] Be more specific to avoid CP

---
 .../semmle/go/dataflow/internal/DataFlowImplConsistency.qll    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/go/ql/lib/semmle/go/dataflow/internal/DataFlowImplConsistency.qll b/go/ql/lib/semmle/go/dataflow/internal/DataFlowImplConsistency.qll
index 3e55d62cf51..b4d92771150 100644
--- a/go/ql/lib/semmle/go/dataflow/internal/DataFlowImplConsistency.qll
+++ b/go/ql/lib/semmle/go/dataflow/internal/DataFlowImplConsistency.qll
@@ -5,6 +5,7 @@
 
 private import go
 private import DataFlowImplSpecific as Impl
+private import DataFlowUtil
 private import TaintTrackingImplSpecific
 private import codeql.dataflow.internal.DataFlowImplConsistency
 private import semmle.go.dataflow.internal.DataFlowNodes
@@ -17,7 +18,7 @@ private module Input implements InputSig<Location, Impl::GoDataFlow> {
   predicate uniqueNodeLocationExclude(DataFlow::Node n) { missingLocationExclude(n) }
 
   predicate localFlowIsLocalExclude(DataFlow::Node n1, DataFlow::Node n2) {
-    n1 instanceof DataFlow::FunctionNode and exists(n2)
+    n1 instanceof DataFlow::FunctionNode and simpleLocalFlowStep(n1, n2, _)
   }
 
   predicate argHasPostUpdateExclude(DataFlow::ArgumentNode n) {