CodeQL library for C/C++
codeql/cpp-all 0.7.2 ( changelog , source )
Search

Predicate TaintTracking :: localTaintStep

Holds if taint propagates from nodeFrom to nodeTo in exactly one local (intra-procedural) step.

Import path

import semmle.code.cpp.dataflow.TaintTracking
predicate localTaintStep ( Node src , Node sink )