We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 34cc938 commit a498ab2Copy full SHA for a498ab2
go/ql/lib/semmle/go/security/IncorrectIntegerConversionLib.qll
@@ -134,11 +134,11 @@ class ConversionWithoutBoundsCheckConfig extends TaintTracking::Configuration {
134
node = DataFlow::BarrierGuard<upperBoundCheckGuard/3>::getABarrierNodeForGuard(g) and
135
g.isBoundFor(bitSize, sinkIsSigned)
136
)
137
- }
138
-
139
- override predicate isSanitizerOut(DataFlow::Node node) {
140
- exists(int bitSize | isIncorrectIntegerConversion(sourceBitSize, bitSize) |
141
- this.isSinkWithBitSize(node, bitSize)
+ or
+ exists(DataFlow::Node sink, int bitSize |
+ isIncorrectIntegerConversion(sourceBitSize, bitSize) and
+ this.isSinkWithBitSize(sink, bitSize) and
+ TaintTracking::localTaintStep(sink, node)
142
143
}
144
0 commit comments