CodeQL library for C/C++
codeql/cpp-all 4.0.3-dev (changelog, source)
Search

Predicate SpeculativeTaintFlow::speculativeTaintStep

Holds if the additional step from src to sink should be considered in speculative taint flow exploration.

Import path

import semmle.code.cpp.ir.dataflow.internal.TaintTrackingUtil
predicate speculativeTaintStep(Node src, Node sink)