CodeQL library for C/C++
codeql/cpp-all 0.7.2 ( changelog , source )
Search

Predicate TaintTracking :: localAdditionalTaintStep

Holds if taint can flow in one local step from nodeFrom to nodeTo excluding local data flow steps. That is, nodeFrom and nodeTo are likely to represent different objects.

Import path

import semmle.code.cpp.dataflow.TaintTracking
predicate localAdditionalTaintStep ( Node nodeFrom , Node nodeTo )