Skip to content

Commit 4233c91

Browse files
authored
Merge pull request github#11469 from atorralba/atorralba/swift/fix-local-taint
Swift: Fix local taint
2 parents f3dca95 + 0e59257 commit 4233c91

File tree

2 files changed

+1412
-0
lines changed

2 files changed

+1412
-0
lines changed

swift/ql/lib/codeql/swift/dataflow/internal/TaintTrackingPrivate.qll

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,13 @@ private module Cached {
7474
*/
7575
cached
7676
predicate localTaintStepCached(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
77+
DataFlow::localFlowStep(nodeFrom, nodeTo)
78+
or
7779
defaultAdditionalTaintStep(nodeFrom, nodeTo)
80+
or
81+
// Simple flow through library code is included in the exposed local
82+
// step relation, even though flow is technically inter-procedural
83+
FlowSummaryImpl::Private::Steps::summaryThroughStepTaint(nodeFrom, nodeTo, _)
7884
}
7985
}
8086

0 commit comments

Comments
 (0)