Update cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/InvalidPointerToDereference.qll

MathiasVP · jketema · web-flow · commit 13989dba9149 · 2023-07-25T11:20:03.000+02:00
Co-authored-by: Jeroen Ketema &lt;93738568+jketema@users.noreply.github.com&gt;
diff --git a/cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/InvalidPointerToDereference.qll b/cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/InvalidPointerToDereference.qll
@@ -37,7 +37,7 @@
  * `deltaDerefSinkAndDerefAddress >= 0`. The load attached to `*p` is the "operation". To ensure that the path makes
  * intuitive sense, we only pick operations that are control-flow reachable from the dereference sink.
  *
- * To compute the amount of the dereference is away from the final entry of the allocation, we sum the two deltas
+ * To compute how many elements the dereference is beyond the end position of the allocation, we sum the two deltas
  * `deltaDerefSourceAndPai` and `deltaDerefSinkAndDerefAddress`. This is done in the `operationIsOffBy` predicate
  * (which is the only predicate exposed by this file).
  *

Original file line number	Diff line number	Diff line change
`@@ -37,7 +37,7 @@`
`37`	`37`	* `deltaDerefSinkAndDerefAddress >= 0`. The load attached to `*p` is the "operation". To ensure that the path makes
`38`	`38`	`* intuitive sense, we only pick operations that are control-flow reachable from the dereference sink.`
`39`	`39`	`*`
`40`		`- * To compute the amount of the dereference is away from the final entry of the allocation, we sum the two deltas`
	`40`	`+ * To compute how many elements the dereference is beyond the end position of the allocation, we sum the two deltas`
`41`	`41`	* `deltaDerefSourceAndPai` and `deltaDerefSinkAndDerefAddress`. This is done in the `operationIsOffBy` predicate
`42`	`42`	`* (which is the only predicate exposed by this file).`
`43`	`43`	`*`