hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-21 06:55:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

Making argv filter positional.

Browse Source
This commit is contained in:
Benjamin Rodes
2024-02-21 12:25:35 -05:00
parent 639642fb67
commit 8d35db0fe6
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql
View File

@@ -72,7 +72,7 @@ predicate isNonConst(DataFlow::Node node) {
p = node.asParameter() and
// Ignore main's argv parameter as it is already considered a `FlowSource`
// not ignoring it will result in path redundancies
(f.getName() = "main" implies p.getName() != "argv")
(f.getName() = "main" implies p != f.getParameter(1))
)
or
// Consider as an input any out arg of a function or a function's return where the function is not: