Skip to content

Commit e895f96

Browse files
committed
Ruby: Taint flow to second block param in map
When `map` is called on a hash, the values in the hash are passed to the second parameter of the block.
1 parent 80ae017 commit e895f96

File tree

1 file changed

+1
-1
lines changed
  • ruby/ql/lib/codeql/ruby/frameworks/core

1 file changed

+1
-1
lines changed

ruby/ql/lib/codeql/ruby/frameworks/core/Array.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1855,7 +1855,7 @@ module Enumerable {
18551855

18561856
override predicate propagatesFlow(string input, string output, boolean preservesValue) {
18571857
input = "Argument[self].Element[any]" and
1858-
output = "Argument[block].Parameter[0]" and
1858+
output = "Argument[block].Parameter[0, 1]" and
18591859
preservesValue = true
18601860
or
18611861
input = "Argument[block].ReturnValue" and

0 commit comments

Comments
 (0)