mirror of
https://github.com/github/codeql.git
synced 2026-01-30 23:02:56 +01:00
Fix accidental cartesian product
PointerContent needs to have the PointerType specified as well
This commit is contained in:
@@ -50,8 +50,7 @@ predicate defaultImplicitTaintRead(DataFlow::Node node, DataFlow::Content c) {
|
||||
container instanceof ArrayType and
|
||||
c instanceof DataFlow::ArrayContent
|
||||
or
|
||||
container instanceof PointerType and
|
||||
c instanceof DataFlow::PointerContent
|
||||
c.(DataFlow::PointerContent).getPointerType() = container
|
||||
or
|
||||
container instanceof MapType and
|
||||
c instanceof DataFlow::MapValueContent
|
||||
|
||||
Reference in New Issue
Block a user