Files
codeql/cpp/ql/test/query-tests
Robert Marsh 6f408f949c C++: Refactor ExecTainted.ql to need concatenation
This makes ExecTainted report results only when the tainted value does
not become the start of the string which is eventually run as a shell
command. The theory is that those cases are likely to be deliberate, and
part of the expected threat model of the program (e.g. $CC in make).
This lines up better with the results I considered fixable true
positives in LGTM testing
2021-09-15 10:55:49 -07:00
..
2019-05-01 10:58:03 +01:00
2021-09-13 12:10:58 +02:00
2021-06-07 11:01:00 +01:00
2021-03-30 12:58:04 +01:00
2019-09-09 11:25:53 +02:00