Fix accidental over-modelling of k8s Secret DeepCopy

owen-mc · owen-mc · commit f6dc9e2a3587 · 2023-03-31T16:47:53.000+01:00
diff --git a/go/ql/lib/semmle/go/frameworks/K8sIoApiCoreV1.qll b/go/ql/lib/semmle/go/frameworks/K8sIoApiCoreV1.qll
@@ -23,7 +23,7 @@ module K8sIoApiCoreV1 {
     }
 
     override predicate hasTaintFlow(FunctionInput inp, FunctionOutput outp) {
-      inp.isReceiver() and outp = outp
+      inp.isReceiver() and outp = output
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -23,7 +23,7 @@ module K8sIoApiCoreV1 {`
`23`	`23`	`}`
`24`	`24`
`25`	`25`	`override predicate hasTaintFlow(FunctionInput inp, FunctionOutput outp) {`
`26`		`- inp.isReceiver() and outp = outp`
	`26`	`+ inp.isReceiver() and outp = output`
`27`	`27`	`}`
`28`	`28`	`}`
`29`	`29`