mirror of
https://github.com/github/codeql.git
synced 2026-07-23 20:22:02 +02:00
A minor bug in our CFG means that we evaluate the base of a SliceExpr before the bounds. Since the bounds may have side effects, as in this case, it would be better to evaluate them first. But in the short term I am just adjusting the test to make it work.
9 lines
480 B
Plaintext
9 lines
480 B
Plaintext
edges
|
|
| test.go:15:28:15:30 | buf [postupdate] | test.go:18:10:18:12 | buf | provenance | |
|
|
nodes
|
|
| test.go:15:28:15:30 | buf [postupdate] | semmle.label | buf [postupdate] |
|
|
| test.go:18:10:18:12 | buf | semmle.label | buf |
|
|
subpaths
|
|
#select
|
|
| test.go:18:10:18:12 | buf | test.go:15:28:15:30 | buf [postupdate] | test.go:18:10:18:12 | buf | HTTP response depends on $@ and may be exposed to an external user. | test.go:15:28:15:30 | buf [postupdate] | stack trace information |
|