diff --git a/cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql b/cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql index 891b6f479a1..5fd1c861f98 100644 --- a/cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql +++ b/cpp/ql/src/Likely Bugs/Format/NonConstantFormat.ql @@ -136,6 +136,6 @@ where call.getArgument(call.getFormatParameterIndex()) = formatString and NonConstFlow::flowTo(sink) and isSinkImpl(sink, formatString) -select formatString, //sink.getNode(), src, sink, +select formatString, "The format string argument to " + call.getTarget().getName() + " should be constant to prevent security issues and other potential errors."