hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

C++: Overrideable taint sources in DefaultTaintTracking

Browse Source
This commit is contained in:
Mathias Vorreiter Pedersen
2020-01-15 16:55:20 +01:00
parent 8128d23b6e
commit 87c59e0017
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cpp/ql/src/semmle/code/cpp/ir/dataflow/DefaultTaintTracking.qll
View File

@@ -28,6 +28,8 @@ private predicate userInputInstruction(Instruction instr) {
or
userInputReturned(instr.getConvertedResultExpression())
or
isUserInput(instr.getConvertedResultExpression(), _)
or
instr.getConvertedResultExpression() instanceof EnvironmentRead
or
instr