File tree Expand file tree Collapse file tree 1 file changed +1
-1
lines changed
cpp/ql/src/experimental/Security/CWE/CWE-193 Expand file tree Collapse file tree 1 file changed +1
-1
lines changed Original file line number Diff line number Diff line change 4949 * The path can be described in 3 "chunks":
5050 * 1. One path from the allocation to the construction of the invalid pointer
5151 * 2. Another path from the construction of the invalid pointer to the final pointer that's about to be dereferenced.
52- * 3. Finally, there's a single step from the dataflow node that represents the final pointer to the dereference.
52+ * 3. Finally, a single step from the dataflow node that represents the final pointer to the dereference.
5353 *
5454 * Step 1 happens when the flow state is `TInitial`, and step 2 and 3 happens when the flow state is `TPointerArith(pai)`
5555 * where the pointer-arithmetic instruction `pai` tracks the instruction that generated the out-of-bounds pointer. This
You can’t perform that action at this time.
0 commit comments