Skip to content

Commit 3eb2da4

Browse files
committed
C++: No need to remove duplications manually.
1 parent 20f501d commit 3eb2da4

File tree

1 file changed

+1
-9
lines changed

1 file changed

+1
-9
lines changed

cpp/ql/src/Security/CWE/CWE-497/ExposedSystemData.ql

Lines changed: 1 addition & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -33,14 +33,6 @@ module ExposedSystemDataConfig implements DataFlow::ConfigSig {
3333
module ExposedSystemData = TaintTracking::Global<ExposedSystemDataConfig>;
3434

3535
from ExposedSystemData::PathNode source, ExposedSystemData::PathNode sink
36-
where
37-
ExposedSystemData::flowPath(source, sink) and
38-
not exists(
39-
DataFlow::Node alt // remove duplicate results on conversions
40-
|
41-
ExposedSystemData::flow(source.getNode(), alt) and
42-
alt.asConvertedExpr() = sink.getNode().asIndirectExpr() and
43-
alt != sink.getNode()
44-
)
36+
where ExposedSystemData::flowPath(source, sink)
4537
select sink, source, sink, "This operation exposes system data from $@.", source,
4638
source.getNode().toString()

0 commit comments

Comments
 (0)