diff --git a/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql b/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql index 1a15f6c3a152..73a11272efb4 100644 --- a/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql +++ b/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql @@ -106,11 +106,7 @@ module TaintedPath = TaintTracking::Global; from FileFunction fileFunction, Expr taintedArg, FlowSource taintSource, TaintedPath::PathNode sourceNode, TaintedPath::PathNode sinkNode, string callChain -where - taintedArg = sinkNode.getNode().asIndirectArgument() and - fileFunction.outermostWrapperFunctionCall(taintedArg, callChain) and - TaintedPath::flowPath(sourceNode, sinkNode) and - taintSource = sourceNode.getNode() +where none() select taintedArg, sourceNode, sinkNode, "This argument to a file access function is derived from $@ and then passed to " + callChain + ".", taintSource, "user input (" + taintSource.getSourceType() + ")"