hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2479 from max-schaefer/localTaintStep

Browse Source 
Approved by asgerf
This commit is contained in:
semmle-qlci
2019-12-02 11:35:43 +00:00
committed by GitHub
parent dc7a0c1b91 aeda2d68f8
commit ceb9fff70c
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/semmle/javascript/dataflow/DataFlow.qll
View File

@@ -1575,4 +1575,6 @@ module DataFlow {
import Configuration
import TrackedNodes
import TypeTracking
predicate localTaintStep = TaintTracking::localTaintStep/2;
}

8
javascript/ql/src/semmle/javascript/dataflow/TaintTracking.qll
View File

@@ -902,4 +902,12 @@ module TaintTracking {
override predicate appliesTo(Configuration cfg) { any() }
}
/**
* Holds if taint propagates from `pred` to `succ` in one local (intra-procedural) step.
*/
predicate localTaintStep(DataFlow::Node pred, DataFlow::Node succ) {
DataFlow::localFlowStep(pred, succ) or
any(AdditionalTaintStep s).step(pred, succ)
}
}