Update cpp/ql/src/semmle/code/cpp/models/implementations/StdPair.qll

geoffw0 · jbj · web-flow · commit 8059230bbcbf · 2020-09-28T16:59:28.000+01:00
Co-authored-by: Jonas Jensen &lt;jbj@github.com&gt;
diff --git a/cpp/ql/src/semmle/code/cpp/models/implementations/StdPair.qll b/cpp/ql/src/semmle/code/cpp/models/implementations/StdPair.qll
@@ -38,7 +38,7 @@ class StdMakePair extends TaintFunction {
 
   override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
     // taint flow from any parameter to the returned object
-    input.isParameterDeref(_) and
+    input.isParameterDeref([0, 1]) and
     output.isReturnValue()
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -38,7 +38,7 @@ class StdMakePair extends TaintFunction {`
`38`	`38`
`39`	`39`	`override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {`
`40`	`40`	`// taint flow from any parameter to the returned object`
`41`		`- input.isParameterDeref(_) and`
	`41`	`+ input.isParameterDeref([0, 1]) and`
`42`	`42`	`output.isReturnValue()`
`43`	`43`	`}`
`44`	`44`	`}`