mirror of
https://github.com/github/codeql.git
synced 2026-04-06 07:34:00 +02:00
20 lines
714 B
Plaintext
20 lines
714 B
Plaintext
import experimental.semmle.code.cpp.rangeanalysis.RangeAnalysis
|
|
import semmle.code.cpp.ir.IR
|
|
import semmle.code.cpp.controlflow.IRGuards
|
|
import semmle.code.cpp.ir.ValueNumbering
|
|
|
|
query predicate instructionBounds(
|
|
Instruction i, Bound b, int delta, boolean upper, Reason reason, Location reasonLoc
|
|
) {
|
|
(
|
|
i.getAUse() instanceof ArgumentOperand
|
|
or
|
|
exists(ReturnValueInstruction retInstr | retInstr.getReturnValueOperand() = i.getAUse())
|
|
) and
|
|
boundedInstruction(i, b, delta, upper, reason) and
|
|
not valueNumber(b.getInstruction()) = valueNumber(i) and
|
|
if reason instanceof CondReason
|
|
then reasonLoc = reason.(CondReason).getCond().getLocation()
|
|
else reasonLoc instanceof UnknownLocation
|
|
}
|