hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Adapt query not to depend on TaintTracking::FunctionModel

Browse Source
This commit is contained in:
Chris Smowton
2023-03-23 14:46:11 +00:00
parent c8407ba323
commit a673610e18
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
go/ql/src/Security/CWE-352/ConstantOauth2State.ql
View File

@@ -106,7 +106,10 @@ class PrivateUrlFlowsToAuthCodeUrlCall extends DataFlow::Configuration {
TaintTracking::referenceStep(pred, succ)
or
// Propagate across Sprintf and similar calls
any(Fmt::AppenderOrSprinter s).taintStep(pred, succ)
exists(DataFlow::CallNode cn |
cn.getACalleeIncludingExternals().asFunction() instanceof Fmt::AppenderOrSprinter |
pred = cn.getAnArgument() and succ = cn.getResult()
)
}
predicate isSinkCall(DataFlow::Node sink, DataFlow::CallNode call) {