mirror of
https://github.com/github/codeql.git
synced 2026-04-13 11:04:07 +02:00
Java: precise diff-informed NumericCastTainted
It was discovered by the upcoming support for exact locations matching in diff-informed testing that this data-flow configuration did not correspond exactly to the query.
This commit is contained in:
@@ -104,6 +104,13 @@ module NumericCastFlowConfig implements DataFlow::ConfigSig {
|
||||
predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
|
||||
|
||||
predicate observeDiffInformedIncrementalMode() { any() }
|
||||
|
||||
Location getASelectedSinkLocation(DataFlow::Node sink) {
|
||||
exists(NumericNarrowingCastExpr cast |
|
||||
cast.getExpr() = sink.asExpr() and
|
||||
result = cast.getLocation()
|
||||
)
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user