Robert Marsh 6f408f949c C++: Refactor ExecTainted.ql to need concatenation ...

This makes ExecTainted report results only when the tainted value does
not become the start of the string which is eventually run as a shell
command. The theory is that those cases are likely to be deliberate, and
part of the expected threat model of the program (e.g. $CC in make).
This lines up better with the results I considered fixable true
positives in LGTM testing

2021-09-15 10:55:49 -07:00

..

CWE

C++: Refactor ExecTainted.ql to need concatenation

2021-09-15 10:55:49 -07:00