We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent c80989c commit 6381e7bCopy full SHA for 6381e7b
1 file changed
cpp/src/security/UnsafeImplicitConversions/UnsafeImplicitConversions.ql
@@ -323,11 +323,12 @@ where
323
or
324
addressIsTaken(cast.getEnclosingFunction())
325
)
326
- // Uncomment to report conversions with untrusted inputs only
327
- /*
328
- and exists(DataFlow::Node source, DataFlow::Node sink |
329
- cast.getExpr() = sink.asExpr() and
330
- UnsafeUserInputConversionFlow::flow(source, sink)
331
- )
332
- */
+// Uncomment to report conversions with untrusted inputs only
+/*
+ * and exists(DataFlow::Node source, DataFlow::Node sink |
+ * cast.getExpr() = sink.asExpr() and
+ * UnsafeUserInputConversionFlow::flow(source, sink)
+ * )
+ */
333
+
334
select cast, "Implicit cast from " + fromType + " to " + toType + " (" + problemType + ")"
0 commit comments