CodeQL library for C/C++

codeql/cpp-all 6.0.1-dev (changelog, source)

Module TaintFlowMakeCore::AddSpeculativeTaintSteps

Import path

import codeql.dataflow.TaintTracking

Imports

An input configuration for data flow using flow state. This signature equals StateConfigSig, but requires explicit implementation of all predicates.

Predicates

isAdditionalFlowStep	Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps. This step is only applicable in `state1` and updates the flow state to `state2`.
isBarrier	Holds if data flow through `node` is prohibited when the flow state is `state`.
isBarrierIn	Holds if data flow into `node` is prohibited when the target flow state is `state`.
isBarrierOut	Holds if data flow out of `node` is prohibited when the originating flow state is `state`.
isSink	Holds if `sink` is a relevant data flow sink accepting `state`.
isSource	Holds if `source` is a relevant data flow source with the given initial `state`.

Classes

Parameters

Config		FullStateConfigSig
speculationLimit		speculationLimitSig