CodeQL library for C/C++
codeql/cpp-all 0.4.0-dev (changelog, source)
Search

Predicate TaintTracking::localTaintStep

Holds if taint propagates from nodeFrom to nodeTo in exactly one local (intra-procedural) step.

Import path

import semmle.code.cpp.dataflow.TaintTracking
predicate localTaintStep(Node src, Node sink)