CodeQL library for C/C++
Search

Predicate TaintedWithPath::taintedWithoutGlobals

Holds if tainted can be reached from a taint source without passing through a global variable.

Import path

import semmle.code.cpp.ir.dataflow.DefaultTaintTracking
predicate taintedWithoutGlobals(Element tainted)