We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 997eb1c commit 099e11fCopy full SHA for 099e11f
cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/InvalidPointerToDereference.qll
@@ -33,7 +33,7 @@
33
* instruction that consumes the address operand the "operation".
34
*
35
* For example, consider the flow from `base + size` to `end` above. The sink is `end` on line 3 because
36
- * `p <= end.asInstruction() + deltaDerefSinkAndDerefAddress` where `p` is the address operand in `use(*p)` and
+ * `p <= end.asInstruction() + deltaDerefSinkAndDerefAddress`, where `p` is the address operand in `use(*p)` and
37
* `deltaDerefSinkAndDerefAddress >= 0`. The load attached to `*p` is the "operation". To ensure that the path makes
38
* intuitive sense, we only pick operations that are control-flow reachable from the dereference sink.
39
0 commit comments