C++: Simplify cpp/path-injection now argv sources are parameters

jketema · jketema · commit ed33b905a6e6 · 2022-12-19T12:54:16.000+01:00
diff --git a/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql b/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql
@@ -91,8 +91,6 @@ class TaintedPathConfiguration extends TaintTracking::Configuration {
     )
   }
 
-  override predicate isSanitizerIn(DataFlow::Node node) { this.isSource(node) }
-
   override predicate isSanitizer(DataFlow::Node node) {
     node.asExpr().(Call).getTarget().getUnspecifiedType() instanceof ArithmeticType
     or

Original file line number	Diff line number	Diff line change
`@@ -91,8 +91,6 @@ class TaintedPathConfiguration extends TaintTracking::Configuration {`
`91`	`91`	`)`
`92`	`92`	`}`
`93`	`93`
`94`		`- override predicate isSanitizerIn(DataFlow::Node node) { this.isSource(node) }`
`95`		`-`
`96`	`94`	`override predicate isSanitizer(DataFlow::Node node) {`
`97`	`95`	`node.asExpr().(Call).getTarget().getUnspecifiedType() instanceof ArithmeticType`
`98`	`96`	`or`