CodeQL library for C/C++
codeql/cpp-all 0.3.2 (changelog, source)

Member predicate TaintTracking::Configuration::isAdditionalTaintStep

Holds if taint may propagate from node1 to node2 in addition to the normal data-flow and taint steps. This step is only applicable in state1 and updates the flow state to state2.

predicate isAdditionalTaintStep(Node node1, FlowState state1, Node node2, FlowState state2)