JavaScript: Remove a bindingset annotation.

This commit is contained in:
Max Schaefer
2020-11-23 10:27:29 +00:00
parent 3853da0969
commit b3ab6efd1d

View File

@@ -804,7 +804,6 @@ private module Redis {
* For getter-like methods it is not generally possible to gain access "outside" of where you are supposed to have access,
* it is at most possible to get a Redis call to return more results than expected (e.g. by adding more members to [`geohash`](https://redis.io/commands/geohash)).
*/
bindingset[argIndex]
predicate argumentIsAmbiguousKey(string method, int argIndex) {
method =
[
@@ -815,7 +814,8 @@ private module Redis {
] and
argIndex = 0
or
method = ["bitop", "hmset", "mset", "msetnx", "geoadd"] and argIndex >= 0
method = ["bitop", "hmset", "mset", "msetnx", "geoadd"] and
argIndex in [0 .. any(DataFlow::InvokeNode invk).getNumArgument() - 1]
}
}