Skip to content

Commit 6d108c0

Browse files
smowtonaschackmull
andauthored
Improve docstring for composedValueAndTaintModelStep
Co-authored-by: Anders Schack-Mulligen <[email protected]>
1 parent 915a19f commit 6d108c0

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

java/ql/src/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -64,9 +64,9 @@ private predicate localAdditionalBasicTaintStep(DataFlow::Node src, DataFlow::No
6464
}
6565

6666
/**
67-
* Holds if an additional step from `src` to `sink` can be inferred from a value-preserving step
68-
* across a method callsite (from input to input, or input to result) and a taint-preserving step
69-
* across the same callsite from a different input. For example, if we know that `f(a, b)` returns
67+
* Holds if an additional step from `src` to `sink` through a call can be inferred from the
68+
* combination of a value-preserving step providing an alias between an input and the output
69+
* and a taint step from `src` to one the aliased nodes. For example, if we know that `f(a, b)` returns
7070
* the exact value of `a` and also propagates taint from `b` to its result, then we also know that
7171
* `a` is tainted after `f` completes, and vice versa.
7272
*/

0 commit comments

Comments
 (0)