CodeQL library for C/C++
codeql/cpp-all 1.1.2-dev (changelog, source)
Search

Predicate localTaintStep

Holds if taint propagates from nodeFrom to nodeTo in exactly one local (intra-procedural) step.

Import path

import semmle.code.cpp.dataflow.internal.TaintTrackingUtil
predicate localTaintStep(Node src, Node sink)