Filter revFlowParamToReturn using flowThroughIntoCall

2026-05-30 19:11:23 +02:00 · 2025-01-10 18:49:50 +00:00
parent 547dc22a6c
commit b83e35c3ad
1 changed files with 2 additions and 1 deletions
--- a/shared/dataflow/codeql/dataflow/internal/DataFlowImpl.qll
+++ b/shared/dataflow/codeql/dataflow/internal/DataFlowImpl.qll
@@ -2405,7 +2405,8 @@ module MakeImpl<LocationSig Location, InputSig<Location> Lang> {
          revFlow(pragma[only_bind_into](p), state, TReturnCtxMaybeFlowThrough(pos),
            apSome(returnAp), pragma[only_bind_into](ap)) and
          parameterFlowThroughAllowed(p, pos.getKind()) and
-          PrevStage::parameterMayFlowThrough(p, isNil(ap))
+          PrevStage::parameterMayFlowThrough(p, isNil(ap)) and
+          flowThroughIntoCall(_, _, p, ap, returnAp) and
        }

        pragma[nomagic]