hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 00:35:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

Rust: Include taint steps when generating flow models

Browse Source
This commit is contained in:
Tom Hvitved
2026-03-25 12:52:08 +01:00
parent 70d8c1c76e
commit fba4a83dc8
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
rust/ql/src/utils/modelgenerator/internal/CaptureModels.qll
View File

@@ -138,7 +138,10 @@ private module SummaryModelGeneratorInput implements SummaryModelGeneratorInputS
Parameter asParameter(NodeExtended node) { result = node.asParameter() }
predicate isAdditionalContentFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) { none() }
predicate isAdditionalContentFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
RustTaintTracking::defaultAdditionalTaintStep(nodeFrom, nodeTo, _) and
not RustDataFlow::readStep(nodeFrom, _, nodeTo)
}
predicate isField(DataFlow::ContentSet c) {
c.(SingletonContentSet).getContent() instanceof FieldContent