mirror of
https://github.com/github/codeql.git
synced 2026-04-26 09:15:12 +02:00
Since we cannot track data flow from a fully-converted expression but only the unconverted expression, we should check whether the address initially escapes into the unconverted expression, not the fully-converted one. This fixes most of the false positives observed on lgtm.com.