mirror of
https://github.com/github/codeql.git
synced 2026-04-19 14:04:09 +02:00
Fix accidental cartesian product
PointerContent needs to have the PointerType specified as well
This commit is contained in:
@@ -50,8 +50,7 @@ predicate defaultImplicitTaintRead(DataFlow::Node node, DataFlow::Content c) {
|
||||
container instanceof ArrayType and
|
||||
c instanceof DataFlow::ArrayContent
|
||||
or
|
||||
container instanceof PointerType and
|
||||
c instanceof DataFlow::PointerContent
|
||||
c.(DataFlow::PointerContent).getPointerType() = container
|
||||
or
|
||||
container instanceof MapType and
|
||||
c instanceof DataFlow::MapValueContent
|
||||
|
||||
Reference in New Issue
Block a user