diff --git a/cpp/ql/lib/semmle/code/cpp/models/interfaces/FormattingFunction.qll b/cpp/ql/lib/semmle/code/cpp/models/interfaces/FormattingFunction.qll index 1202895cca2..da2a8143dfe 100644 --- a/cpp/ql/lib/semmle/code/cpp/models/interfaces/FormattingFunction.qll +++ b/cpp/ql/lib/semmle/code/cpp/models/interfaces/FormattingFunction.qll @@ -97,7 +97,7 @@ abstract class FormattingFunction extends ArrayFunction, TaintFunction { result.getSize() > 1 or not getFormatCharType().getSize() > 1 and - result = getAFormatterWideTypeOrDefault() // may have more than one result + result = pragma[only_bind_out](getAFormatterWideTypeOrDefault()) // may have more than one result } /**