C++: Make sure a CatchBlock that catches a const std::bad_alloc& is also a BadAllocCatchBlock.

2026-05-02 04:05:14 +02:00 · 2021-05-06 14:35:27 +02:00
parent 42b8f923be
commit 95e65dec8f
1 changed files with 2 additions and 1 deletions
--- a/cpp/ql/src/experimental/Security/CWE/CWE-570/IncorrectAllocationErrorHandling.ql
+++ b/cpp/ql/src/experimental/Security/CWE/CWE-570/IncorrectAllocationErrorHandling.ql
@@ -139,7 +139,8 @@ class BadAllocType extends Class {
 */
 class BadAllocCatchBlock extends CatchBlock {
  BadAllocCatchBlock() {
-    this.getParameter().getUnspecifiedType() = any(BadAllocType badAlloc).getADerivedClass*()
+    this.getParameter().getUnspecifiedType().stripType() =
+      any(BadAllocType badAlloc).getADerivedClass*()
    or
    not exists(this.getParameter())
  }