mirror of
https://github.com/github/codeql.git
synced 2025-12-28 06:36:33 +01:00
17 lines
621 B
Plaintext
17 lines
621 B
Plaintext
import semmle.code.cpp.security.TaintTrackingImpl as AST
|
|
import semmle.code.cpp.ir.dataflow.DefaultTaintTracking as IR
|
|
import cpp
|
|
|
|
from Expr source, Element tainted, string side
|
|
where
|
|
AST::taintedIncludingGlobalVars(source, tainted, _) and
|
|
not IR::taintedIncludingGlobalVars(source, tainted, _) and
|
|
not tainted.getLocation().getFile().getExtension() = "h" and
|
|
side = "AST only"
|
|
or
|
|
IR::taintedIncludingGlobalVars(source, tainted, _) and
|
|
not AST::taintedIncludingGlobalVars(source, tainted, _) and
|
|
not tainted.getLocation().getFile().getExtension() = "h" and
|
|
side = "IR only"
|
|
select source, tainted, side
|