We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1dd5926 commit c8be67cCopy full SHA for c8be67c
cpp/ql/src/semmle/code/cpp/ir/dataflow/DefaultTaintTracking.qll
@@ -336,8 +336,8 @@ private Element adjustedSink(DataFlow::Node sink) {
336
// short-circuiting condition and thus might get skipped.
337
result.(NotExpr).getOperand() = sink.asExpr()
338
or
339
- // Taint `e--` and `e++` when `e` is tainted.
340
- result.(PostfixCrementOperation).getAnOperand() = sink.asExpr()
+ // Taint postfix and prefix crement operations when their operand is tainted.
+ result.(CrementOperation).getAnOperand() = sink.asExpr()
341
342
// Taint `e1 += e2`, `e &= e2` and friends when `e1` or `e2` is tainted.
343
result.(AssignOperation).getAnOperand() = sink.asExpr()
0 commit comments