mirror of
https://github.com/github/codeql.git
synced 2025-12-31 16:16:34 +01:00
13 lines
442 B
Plaintext
13 lines
442 B
Plaintext
import cpp
|
|
import semmle.code.cpp.dataflow.DataFlow
|
|
import semmle.code.cpp.commons.Printf
|
|
|
|
class SourceNode extends DataFlow::Node { /* ... */ }
|
|
|
|
from FormattingFunction f, Call c, SourceNode src, DataFlow::Node arg
|
|
where c.getTarget() = f and
|
|
arg.asExpr() = c.getArgument(f.getFormatParameterIndex()) and
|
|
DataFlow::localFlow(src, arg) and
|
|
not src.asExpr() instanceof StringLiteral
|
|
select arg, "Non-constant format string."
|