We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
cpp/command-line-injection
1 parent c2b7300 commit 694d639Copy full SHA for 694d639
cpp/ql/src/Security/CWE/CWE-078/ExecTainted.ql
@@ -77,7 +77,7 @@ class ExecState extends DataFlow::FlowState {
77
ExecState() {
78
this =
79
"ExecState (" + fst.getLocation() + " | " + fst + ", " + snd.getLocation() + " | " + snd + ")" and
80
- interestingConcatenation(fst, snd)
+ interestingConcatenation(pragma[only_bind_into](fst), pragma[only_bind_into](snd))
81
}
82
83
DataFlow::Node getFstNode() { result = fst }
0 commit comments