Files
codeql/docs/language/ql-training/query-examples/cpp/data-flow-cpp-1.ql
2019-09-05 08:40:36 +01:00

8 lines
276 B
Plaintext

import cpp
import semmle.code.cpp.commons.Printf
from Call c, FormattingFunction ff, Expr format
where c.getTarget() = ff and
format = c.getArgument(ff.getFormatParameterIndex()) and
not format instanceof StringLiteral
select format, "Non-constant format string."