Python: Constrain execution paths for taint_at_depth

RasmusWL · RasmusWL · commit d55acc38dfbe · 2020-03-27T16:20:08.000+01:00
Thanks Taus!
diff --git a/python/ql/src/semmle/python/dataflow/Implementation.qll b/python/ql/src/semmle/python/dataflow/Implementation.qll
@@ -964,6 +964,7 @@ private TaintKind taint_at_depth(SequenceKind parent_kind, int depth) {
         result = parent_kind.getMember()
         or
         // recursive case
+        depth > 1 and
         result = taint_at_depth(parent_kind.getMember(), depth-1)
     )
 }

Original file line number	Diff line number	Diff line change
`@@ -964,6 +964,7 @@ private TaintKind taint_at_depth(SequenceKind parent_kind, int depth) {`
`964`	`964`	`result = parent_kind.getMember()`
`965`	`965`	`or`
`966`	`966`	`// recursive case`
	`967`	`+ depth > 1 and`
`967`	`968`	`result = taint_at_depth(parent_kind.getMember(), depth-1)`
`968`	`969`	`)`
`969`	`970`	`}`