We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 7b0492b commit ffa8e04Copy full SHA for ffa8e04
1 file changed
cpp/src/security/UnsafeImplicitConversions/UnsafeImplicitConversions.ql
@@ -323,11 +323,12 @@ where
323
or
324
addressIsTaken(cast.getEnclosingFunction())
325
)
326
- // Uncomment to report conversions with untrusted inputs only
327
- /*
328
- and exists(DataFlow::Node source, DataFlow::Node sink |
329
- cast.getExpr() = sink.asExpr() and
330
- UnsafeUserInputConversionFlow::flow(source, sink)
331
- )
332
- */
+// Uncomment to report conversions with untrusted inputs only
+/*
+ * and exists(DataFlow::Node source, DataFlow::Node sink |
+ * cast.getExpr() = sink.asExpr() and
+ * UnsafeUserInputConversionFlow::flow(source, sink)
+ * )
+ */
333
+
334
select cast, "Implicit cast from " + fromType + " to " + toType + " (" + problemType + ")"
0 commit comments