This commit is contained in:
Mathias Vorreiter Pedersen 2023-10-17 16:15:59 +01:00
Родитель 9a6fc967db
Коммит c8e8ac0b55
1 изменённых файлов: 1 добавлений и 0 удалений

Просмотреть файл

@ -102,6 +102,7 @@ Flow from a qualifier to a field access
However, sometimes the writes or reads are not visible to CodeQL (for example, because the implementation of the function isn't included in the database), and so dataflow won't be able to match up all stores with reads, and thus you don't get the result you want. For example, consider an alternative setup where our source of data starts as the outgoing argument of a function `write_user_input_to`. We can model this setup in the dataflow library using the following ``isSource``:
.. code-block:: ql
predicate isSource(DataFlow::Node source) {
exists(Call call |
call.getTarget().hasName("write_user_input_to") and