@@ -24,7 +24,7 @@ import semmle.code.cpp.valuenumbering.GlobalValueNumbering
24
24
* Holds if `call` is a call to `strncat` such that `sizeArg` and `destArg` are the size and
25
25
* destination arguments, respectively.
26
26
*/
27
- predicate interestringCallWithArgs ( Call call , Expr sizeArg , Expr destArg ) {
27
+ predicate interestingCallWithArgs ( Call call , Expr sizeArg , Expr destArg ) {
28
28
exists ( StrcatFunction strcat |
29
29
strcat = call .getTarget ( ) and
30
30
sizeArg = call .getArgument ( strcat .getParamSize ( ) ) and
@@ -37,7 +37,7 @@ predicate interestringCallWithArgs(Call call, Expr sizeArg, Expr destArg) {
37
37
* argument `destArg`, and `destArg` is the size of the buffer pointed to by `destArg`.
38
38
*/
39
39
predicate case1 ( FunctionCall fc , Expr sizeArg , VariableAccess destArg ) {
40
- interestringCallWithArgs ( fc , sizeArg , destArg ) and
40
+ interestingCallWithArgs ( fc , sizeArg , destArg ) and
41
41
exists ( VariableAccess va |
42
42
va = sizeArg .( BufferSizeExpr ) .getArg ( ) and
43
43
destArg .getTarget ( ) = va .getTarget ( )
@@ -49,7 +49,7 @@ predicate case1(FunctionCall fc, Expr sizeArg, VariableAccess destArg) {
49
49
* argument `destArg`, and `sizeArg` computes the value `sizeof (dest) - strlen (dest)`.
50
50
*/
51
51
predicate case2 ( FunctionCall fc , Expr sizeArg , VariableAccess destArg ) {
52
- interestringCallWithArgs ( fc , sizeArg , destArg ) and
52
+ interestingCallWithArgs ( fc , sizeArg , destArg ) and
53
53
exists ( SubExpr sub , int n |
54
54
// The destination buffer is an array of size n
55
55
destArg .getUnspecifiedType ( ) .( ArrayType ) .getSize ( ) = n and
0 commit comments