CodeQL library for C/C++
Search

Member predicate DataFlow::Node::asPartialDefinition

Gets the expression that is partially defined by this node, if any.

Partial definitions are created for field stores (x.y = taint(); is a partial definition of x), and for calls that may change the value of an object (so x.set(taint()) is a partial definition of x, and transfer(&x, taint()) is a partial definition of &x).

Expr asPartialDefinition()