CodeQL library for C/C++
Search

Predicate modeledTaintStep

Holds if taint can flow from instrIn to instrOut through a call to a modeled function.

Import path

import semmle.code.cpp.ir.dataflow.internal.TaintTrackingUtil
predicate modeledTaintStep(Operand nodeIn, Instruction nodeOut)