Shared: Only use heuristic summary flow in case there is no content based flow.

michaelnebel · michaelnebel · commit 104d448b166d · 2024-10-02T15:24:01.000+02:00
diff --git a/shared/mad/codeql/mad/modelgenerator/internal/ModelGeneratorImpl.qll b/shared/mad/codeql/mad/modelgenerator/internal/ModelGeneratorImpl.qll
@@ -881,7 +881,7 @@ module MakeModelGenerator<
   string captureMixedFlow(DataFlowSummaryTargetApi api, boolean lift) {
     result = ContentSensitive::captureFlow(api, lift)
     or
-    not exists(ContentSensitive::captureFlow(api, lift)) and
+    not exists(ContentSensitive::captureFlow(api, _)) and
     result = captureFlow(api) and
     lift = true
   }

Original file line number	Diff line number	Diff line change
`@@ -881,7 +881,7 @@ module MakeModelGenerator<`
`881`	`881`	`string captureMixedFlow(DataFlowSummaryTargetApi api, boolean lift) {`
`882`	`882`	`result = ContentSensitive::captureFlow(api, lift)`
`883`	`883`	`or`
`884`		`- not exists(ContentSensitive::captureFlow(api, lift)) and`
	`884`	`+ not exists(ContentSensitive::captureFlow(api, _)) and`
`885`	`885`	`result = captureFlow(api) and`
`886`	`886`	`lift = true`
`887`	`887`	`}`