From 7528819156c8156db3146bd9070d7928e81ddc03 Mon Sep 17 00:00:00 2001 From: Anders Schack-Mulligen Date: Fri, 24 Mar 2023 08:43:47 +0100 Subject: [PATCH] Update DoNotPerformFileOperationsOnDevices.ql Rename references to data flow --- .../src/rules/FIO32-C/DoNotPerformFileOperationsOnDevices.ql | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/c/cert/src/rules/FIO32-C/DoNotPerformFileOperationsOnDevices.ql b/c/cert/src/rules/FIO32-C/DoNotPerformFileOperationsOnDevices.ql index 89e1f9e133..5784e820d9 100644 --- a/c/cert/src/rules/FIO32-C/DoNotPerformFileOperationsOnDevices.ql +++ b/c/cert/src/rules/FIO32-C/DoNotPerformFileOperationsOnDevices.ql @@ -89,7 +89,7 @@ module TaintedPathConfiguration implements DataFlow::ConfigSig { } } -module TaintedPath = TaintTracking::Make; +module TaintedPath = TaintTracking::Global; from FileFunction fileFunction, Expr taintedArg, FlowSource taintSource, @@ -98,7 +98,7 @@ where not isExcluded(taintedArg, IO3Package::doNotPerformFileOperationsOnDevicesQuery()) and taintedArg = sinkNode.getNode().asIndirectArgument() and fileFunction.outermostWrapperFunctionCall(taintedArg, callChain) and - TaintedPath::hasFlowPath(sourceNode, sinkNode) and + TaintedPath::flowPath(sourceNode, sinkNode) and taintSource = sourceNode.getNode() select taintedArg, sourceNode, sinkNode, "This argument to a file access function is derived from $@ and then passed to " + callChain + ".",