mirror of
https://github.com/github/codeql.git
synced 2026-03-30 04:08:16 +02:00
17 lines
617 B
Plaintext
17 lines
617 B
Plaintext
import semmle.code.cpp.security.TaintTracking as AST
|
|
import semmle.code.cpp.ir.dataflow.DefaultTaintTracking as IR
|
|
import cpp
|
|
|
|
from Expr source, Element tainted, string side
|
|
where
|
|
AST::taintedIncludingGlobalVars(source, tainted, _) and
|
|
not IR::taintedIncludingGlobalVars(source, tainted, _) and
|
|
not tainted.getLocation().getFile().getExtension() = "h" and
|
|
side = "AST only"
|
|
or
|
|
IR::taintedIncludingGlobalVars(source, tainted, _) and
|
|
not AST::taintedIncludingGlobalVars(source, tainted, _) and
|
|
not tainted.getLocation().getFile().getExtension() = "h" and
|
|
side = "IR only"
|
|
select source, tainted, side
|