mirror of
https://github.com/github/codeql.git
synced 2025-12-20 18:56:32 +01:00
Restrict param2return value features
This commit is contained in:
@@ -192,6 +192,10 @@ class ParameterToReturnValueTaintConfig extends TaintTracking::Configuration {
|
||||
override predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) {
|
||||
node2.asExpr().(ConstructorCall).getAnArgument() = node1.asExpr()
|
||||
}
|
||||
|
||||
override DataFlow::FlowFeature getAFeature() {
|
||||
result instanceof DataFlow::FeatureEqualSourceSinkCallContext
|
||||
}
|
||||
}
|
||||
|
||||
predicate paramFlowToReturnValueExists(Parameter p) {
|
||||
|
||||
@@ -80,7 +80,7 @@ def runQuery(infoMessage, query):
|
||||
__file__), query)
|
||||
resultBqrs = os.path.join(workDir, "out.bqrs")
|
||||
cmd = ['codeql', 'query', 'run', queryFile, '--database',
|
||||
database, '--output', resultBqrs]
|
||||
database, '--output', resultBqrs, '--threads', '8']
|
||||
|
||||
ret = subprocess.call(cmd)
|
||||
if ret != 0:
|
||||
|
||||
Reference in New Issue
Block a user