mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
C++: Suppress FieldAddressInstruction taint
See code comment. This fixes false positives on openjdk/jdk.
This commit is contained in:
@@ -93,8 +93,8 @@ struct Point {
|
||||
int y;
|
||||
|
||||
void callSink() {
|
||||
sink(this->x); // tainted
|
||||
sink(this->y); // not tainted [FALSE POSITIVE]
|
||||
sink(this->x); // tainted [NOT DETECTED]
|
||||
sink(this->y); // not tainted
|
||||
}
|
||||
};
|
||||
|
||||
|
||||
Reference in New Issue
Block a user