hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

C++: Encode string value of data flow nodes in ExecState

Browse Source
This commit is contained in:
Jeroen Ketema
2022-03-21 21:29:42 +01:00
parent e05227d3fe
commit b79eb6d10d
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
cpp/ql/src/Security/CWE/CWE-078/ExecTainted.ql
View File

@@ -75,8 +75,9 @@ class ExecState extends DataFlow::FlowState {
DataFlow::Node snd;
ExecState() {
this = "ExecState (" + fst.getLocation() + ", " + snd.getLocation() + ")" and
interestingConcatenation(fst, snd)
this =
"ExecState (" + fst.getLocation() + " | " + fst + ", " + snd.getLocation() + " | " + snd + ")" and
interestingConcatenation(fst, snd)
}
DataFlow::Node getFstNode() { result = fst }