multiplier icon indicating copy to clipboard operation
multiplier copied to clipboard

mx-find-sketchy-strstr finds a use of a "url" parameter, but it isn't highlighted anywhere

Open pgoodman opened this issue 2 years ago • 2 comments

image

Target code is the cURL codebase.

./bin/Examples/mx-find-sketchy-strchr --db /tmp/curl.db --function_name strstr

pgoodman avatar Feb 09 '23 03:02 pgoodman

My suspicion is that because this is a function named test, and there are many such functions in cURL, that we are somehow finding redeclarations of the url parameter. I haven't actually checked this, though.

pgoodman avatar Feb 09 '23 16:02 pgoodman

Suspicion mostly confirmed: the calls are in a different fragment: image

This is now an indexer issue to think through.

pgoodman avatar Feb 09 '23 17:02 pgoodman