CodeQL library for C/C++
codeql/cpp-all 3.0.1-dev (changelog, source)
Search

Predicate localTaint

Holds if taint may propagate from source to sink in zero or more local (intra-procedural) steps.

Import path

import semmle.code.cpp.ir.dataflow.internal.TaintTrackingUtil
predicate localTaint(Node source, Node sink)