Merge pull request #14744 from jketema/fgets

C++: Fix `hasRemoteFlowSource` for `fgets`
This commit is contained in:
Jeroen Ketema
2023-11-10 14:03:40 +01:00
committed by GitHub
3 changed files with 20 additions and 4 deletions

View File

@@ -49,10 +49,11 @@ private class FgetsFunction extends DataFlowFunction, TaintFunction, ArrayFuncti
}
override predicate hasRemoteFlowSource(FunctionOutput output, string description) {
output.isParameterDeref(0) and
description = "string read by " + this.getName()
or
output.isReturnValue() and
(
output.isParameterDeref(0) or
output.isReturnValue() or
output.isReturnValueDeref()
) and
description = "string read by " + this.getName()
}