C++: Fix more FPs with extraction errors on cpp/wrong-type-format-arguments

cpp/ql/src/Likely Bugs/Format/WrongTypeFormatArguments.ql

@@ -171,6 +171,10 @@ where
   not arg.isAffectedByMacro() and
   not arg.isFromUninstantiatedTemplate(_) and
   not actual.getUnspecifiedType() instanceof ErroneousType and
+  not (
+    expected instanceof PointerType and
+    actual.getUnspecifiedType().(PointerType).getBaseType() instanceof ErroneousType
+  ) and
   not arg.(Call).mayBeFromImplicitlyDeclaredFunction()
 select arg,
   "This format specifier for type '" + expected.getName() + "' does not match the argument type '" +

cpp/ql/src/change-notes/2024-12-05-wrong-type-format-args.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The "Wrong type of arguments to formatting function" query (`cpp/wrong-type-format-argument`) query no longer produces results when a string type has an extraction error.

cpp/ql/test/query-tests/Likely Bugs/Format/WrongTypeFormatArguments/Buildless/tests.c

@@ -3,9 +3,10 @@
 int printf(const char * format, ...);
 int fprintf();
 
-void f() {
+void f(UNKNOWN_CHAR * str) {
     printf("%s", 1); // BAD
     printf("%s", implicit_function()); // GOOD - we should ignore the type
     sprintf(0, "%s", ""); // GOOD
     fprintf(0, "%s", ""); // GOOD
+    printf("%s", str); // GOOD - erroneous type is ignored
 }