CodeQL library for C/C++
Search

Predicate localAdditionalTaintStep

Holds if taint can flow in one local step from nodeFrom to nodeTo excluding local data flow steps. That is, nodeFrom and nodeTo are likely to represent different objects.

Import path

import semmle.code.cpp.ir.dataflow.internal.TaintTrackingUtil
predicate localAdditionalTaintStep(Node nodeFrom, Node nodeTo)