Update csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPrivate.qll

michaelnebel · hvitved · web-flow · commit fbf40ef02a4a · 2026-03-04T12:28:07.000+01:00
Co-authored-by: Tom Hvitved &lt;hvitved@github.com&gt;
diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPrivate.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPrivate.qll
@@ -110,8 +110,8 @@ private class LocalTaintExprStepConfiguration extends ControlFlowReachabilityCon
 }
 
 private ControlFlow::Nodes::ExprNode getALastEvalNode(ControlFlow::Nodes::ExprNode cfn) {
-  exists(Expr e | any(LocalTaintExprStepConfiguration x).hasExprPath(_, result, e, cfn) |
-    e.(OperatorCall).getTarget() instanceof ImplicitConversionOperator
+  exists(OperatorCall oc | any(LocalTaintExprStepConfiguration x).hasExprPath(_, result, oc, cfn) |
+    oc.getTarget() instanceof ImplicitConversionOperator
   )
 }
 

Original file line number	Diff line number	Diff line change
`@@ -110,8 +110,8 @@ private class LocalTaintExprStepConfiguration extends ControlFlowReachabilityCon`
`110`	`110`	`}`
`111`	`111`
`112`	`112`	`private ControlFlow::Nodes::ExprNode getALastEvalNode(ControlFlow::Nodes::ExprNode cfn) {`
`113`		`- exists(Expr e \| any(LocalTaintExprStepConfiguration x).hasExprPath(_, result, e, cfn) \|`
`114`		`- e.(OperatorCall).getTarget() instanceof ImplicitConversionOperator`
	`113`	`+ exists(OperatorCall oc \| any(LocalTaintExprStepConfiguration x).hasExprPath(_, result, oc, cfn) \|`
	`114`	`+ oc.getTarget() instanceof ImplicitConversionOperator`
`115`	`115`	`)`
`116`	`116`	`}`
`117`	`117`