C++: Exclude pointer results from cpp/integer-overflow-tainted.

2026-04-28 18:25:24 +02:00 · 2021-04-23 16:01:53 +02:00
parent 3cf4f1f956
commit 86822f6c61
2 changed files with 1 additions and 1 deletions
--- a/cpp/ql/src/Security/CWE/CWE-190/IntegerOverflowTainted.ql
+++ b/cpp/ql/src/Security/CWE/CWE-190/IntegerOverflowTainted.ql
@@ -28,6 +28,7 @@ predicate outOfBoundsExpr(Expr expr, string kind) {

 from Expr use, Expr origin, string kind
 where
+  not use.getUnspecifiedType() instanceof PointerType and
  outOfBoundsExpr(use, kind) and
  tainted(origin, use) and
  origin != use and