Update DangerousUseMbtowc.ql

ihsinme · web-flow · commit 8967f57bbc06 · 2022-07-04T11:17:12.000+03:00
diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-125/DangerousUseMbtowc.ql b/cpp/ql/src/experimental/Security/CWE/CWE-125/DangerousUseMbtowc.ql
@@ -68,7 +68,7 @@ predicate findUseCharacterConversion(Expr exp, string msg) {
     fc = exp and
     (
       exists(Loop lptmp | lptmp = fc.getEnclosingStmt().getParentStmt*()) and
-      fc.getTarget().hasName(["mbtowc", "mbrtowc"]) and
+      fc.getTarget().hasName(["mbtowc", "mbrtowc", "_mbtowc_l"]) and
       not fc.getArgument(0).isConstant() and
       not fc.getArgument(1).isConstant() and
       (

Original file line number	Diff line number	Diff line change
`@@ -68,7 +68,7 @@ predicate findUseCharacterConversion(Expr exp, string msg) {`
`68`	`68`	`fc = exp and`
`69`	`69`	`(`
`70`	`70`	`exists(Loop lptmp \| lptmp = fc.getEnclosingStmt().getParentStmt*()) and`
`71`		`- fc.getTarget().hasName(["mbtowc", "mbrtowc"]) and`
	`71`	`+ fc.getTarget().hasName(["mbtowc", "mbrtowc", "_mbtowc_l"]) and`
`72`	`72`	`not fc.getArgument(0).isConstant() and`
`73`	`73`	`not fc.getArgument(1).isConstant() and`
`74`	`74`	`(`