We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 51188aa commit b9a1a45Copy full SHA for b9a1a45
1 file changed
cpp/ql/lib/semmle/code/cpp/commons/NullTermination.qll
@@ -65,7 +65,9 @@ predicate mayAddNullTerminator(Expr e, VariableAccess va) {
65
exists(AsmStmt s | s.getEnclosingFunction() = f)
66
or
67
// function where the relevant parameter is returned (leaking it)
68
- exists(ReturnStmt rs | rs.getEnclosingFunction() = f and rs.getExpr().getAChild*() = f.getParameter(i).getAnAccess())
+ exists(ReturnStmt rs |
69
+ rs.getEnclosingFunction() = f and rs.getExpr().getAChild*() = f.getParameter(i).getAnAccess()
70
+ )
71
)
72
73
// Call without target (e.g., function pointer call)
0 commit comments