hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-31 12:48:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #21575 from hvitved/rust/model-generator-taint-steps

Browse Source 
Rust: Include taint steps when generating flow models
This commit is contained in:
Tom Hvitved
2026-03-25 14:41:36 +01:00
committed by GitHub
parent 898713538f fba4a83dc8
commit c579ec9ea7
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
rust/ql/src/utils/modelgenerator/internal/CaptureModels.qll
View File

@@ -138,7 +138,10 @@ private module SummaryModelGeneratorInput implements SummaryModelGeneratorInputS
Parameter asParameter(NodeExtended node) { result = node.asParameter() }
predicate isAdditionalContentFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) { none() }
predicate isAdditionalContentFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
RustTaintTracking::defaultAdditionalTaintStep(nodeFrom, nodeTo, _) and
not RustDataFlow::readStep(nodeFrom, _, nodeTo)
}
predicate isField(DataFlow::ContentSet c) {
c.(SingletonContentSet).getContent() instanceof FieldContent