Skip to content

Commit a498ab2

Browse files
committed
Go: Fix query.
1 parent 34cc938 commit a498ab2

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

go/ql/lib/semmle/go/security/IncorrectIntegerConversionLib.qll

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -134,11 +134,11 @@ class ConversionWithoutBoundsCheckConfig extends TaintTracking::Configuration {
134134
node = DataFlow::BarrierGuard<upperBoundCheckGuard/3>::getABarrierNodeForGuard(g) and
135135
g.isBoundFor(bitSize, sinkIsSigned)
136136
)
137-
}
138-
139-
override predicate isSanitizerOut(DataFlow::Node node) {
140-
exists(int bitSize | isIncorrectIntegerConversion(sourceBitSize, bitSize) |
141-
this.isSinkWithBitSize(node, bitSize)
137+
or
138+
exists(DataFlow::Node sink, int bitSize |
139+
isIncorrectIntegerConversion(sourceBitSize, bitSize) and
140+
this.isSinkWithBitSize(sink, bitSize) and
141+
TaintTracking::localTaintStep(sink, node)
142142
)
143143
}
144144
}

0 commit comments

Comments
 (0)