hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 19:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

C++: localInstruction{Flow,Taint} helpers

Browse Source 
These are analogous to the existing `localExpr{Flow,Taint}` predicates.
This commit is contained in:
Jonas Jensen
2019-11-01 13:16:45 +01:00
parent 1fe5a9e7e7
commit df2fbfb3d0
2 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
cpp/ql/src/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
View File

@@ -214,6 +214,14 @@ private predicate simpleInstructionLocalFlowStep(Instruction iFrom, Instruction
*/ */
predicate localFlow(Node source, Node sink) { localFlowStep*(source, sink) } predicate localFlow(Node source, Node sink) { localFlowStep*(source, sink) }
/**
* Holds if data can flow from `i1` to `i2` in zero or more
* local (intra-procedural) steps.
*/
predicate localInstructionFlow(Instruction e1, Instruction e2) {
localFlow(instructionNode(e1), instructionNode(e2))
}
/** /**
* Holds if data can flow from `e1` to `e2` in zero or more * Holds if data can flow from `e1` to `e2` in zero or more
* local (intra-procedural) steps. * local (intra-procedural) steps.

8
cpp/ql/src/semmle/code/cpp/ir/dataflow/internal/TaintTrackingUtil.qll
View File

@@ -53,6 +53,14 @@ private predicate localInstructionTaintStep(Instruction nodeFrom, Instruction no
*/ */
predicate localTaint(DataFlow::Node source, DataFlow::Node sink) { localTaintStep*(source, sink) } predicate localTaint(DataFlow::Node source, DataFlow::Node sink) { localTaintStep*(source, sink) }
/**
* Holds if taint can flow from `i1` to `i2` in zero or more
* local (intra-procedural) steps.
*/
predicate localInstructionTaint(Instruction i1, Instruction i2) {
localTaint(DataFlow::instructionNode(i1), DataFlow::instructionNode(i2))
}
/** /**
* Holds if taint can flow from `e1` to `e2` in zero or more * Holds if taint can flow from `e1` to `e2` in zero or more
* local (intra-procedural) steps. * local (intra-procedural) steps.