diff --git a/cpp/ql/lib/semmle/code/cpp/dataflow/internal/DataFlowImplCommon.qll b/cpp/ql/lib/semmle/code/cpp/dataflow/internal/DataFlowImplCommon.qll index 0079b259260..bb56e1b54fa 100644 --- a/cpp/ql/lib/semmle/code/cpp/dataflow/internal/DataFlowImplCommon.qll +++ b/cpp/ql/lib/semmle/code/cpp/dataflow/internal/DataFlowImplCommon.qll @@ -80,8 +80,8 @@ predicate accessPathCostLimits(int apLimit, int tupleLimit) { pragma[noinline] predicate argumentPositionMatch(DataFlowCall call, ArgNode arg, ParameterPosition ppos) { exists(ArgumentPosition apos | - arg.argumentOf(call, apos) and - parameterMatch(ppos, apos) + arg.argumentOf(call, pragma[only_bind_into](apos)) and + parameterMatch(ppos, pragma[only_bind_into](apos)) ) } diff --git a/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowImplCommon.qll b/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowImplCommon.qll index 0079b259260..bb56e1b54fa 100644 --- a/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowImplCommon.qll +++ b/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowImplCommon.qll @@ -80,8 +80,8 @@ predicate accessPathCostLimits(int apLimit, int tupleLimit) { pragma[noinline] predicate argumentPositionMatch(DataFlowCall call, ArgNode arg, ParameterPosition ppos) { exists(ArgumentPosition apos | - arg.argumentOf(call, apos) and - parameterMatch(ppos, apos) + arg.argumentOf(call, pragma[only_bind_into](apos)) and + parameterMatch(ppos, pragma[only_bind_into](apos)) ) } diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplCommon.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplCommon.qll index 0079b259260..bb56e1b54fa 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplCommon.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplCommon.qll @@ -80,8 +80,8 @@ predicate accessPathCostLimits(int apLimit, int tupleLimit) { pragma[noinline] predicate argumentPositionMatch(DataFlowCall call, ArgNode arg, ParameterPosition ppos) { exists(ArgumentPosition apos | - arg.argumentOf(call, apos) and - parameterMatch(ppos, apos) + arg.argumentOf(call, pragma[only_bind_into](apos)) and + parameterMatch(ppos, pragma[only_bind_into](apos)) ) } diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplCommon.qll b/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplCommon.qll index 0079b259260..bb56e1b54fa 100644 --- a/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplCommon.qll +++ b/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplCommon.qll @@ -80,8 +80,8 @@ predicate accessPathCostLimits(int apLimit, int tupleLimit) { pragma[noinline] predicate argumentPositionMatch(DataFlowCall call, ArgNode arg, ParameterPosition ppos) { exists(ArgumentPosition apos | - arg.argumentOf(call, apos) and - parameterMatch(ppos, apos) + arg.argumentOf(call, pragma[only_bind_into](apos)) and + parameterMatch(ppos, pragma[only_bind_into](apos)) ) } diff --git a/python/ql/lib/semmle/python/dataflow/new/internal/DataFlowImplCommon.qll b/python/ql/lib/semmle/python/dataflow/new/internal/DataFlowImplCommon.qll index 0079b259260..bb56e1b54fa 100644 --- a/python/ql/lib/semmle/python/dataflow/new/internal/DataFlowImplCommon.qll +++ b/python/ql/lib/semmle/python/dataflow/new/internal/DataFlowImplCommon.qll @@ -80,8 +80,8 @@ predicate accessPathCostLimits(int apLimit, int tupleLimit) { pragma[noinline] predicate argumentPositionMatch(DataFlowCall call, ArgNode arg, ParameterPosition ppos) { exists(ArgumentPosition apos | - arg.argumentOf(call, apos) and - parameterMatch(ppos, apos) + arg.argumentOf(call, pragma[only_bind_into](apos)) and + parameterMatch(ppos, pragma[only_bind_into](apos)) ) }