Update ArrayInPlaceManipulationTaintStep documentation

github · Nov 11, 2024 · 38d3e37 · 38d3e37
1 parent ae57c12
commit 38d3e37
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/javascript/ql/lib/semmle/javascript/Arrays.qll b/javascript/ql/lib/semmle/javascript/Arrays.qll
@@ -445,9 +445,10 @@ private module ArrayLibraries {
     }
   }
 
-  /**
-   * A taint propagating data flow edge arising from in-place array manipulation operations.
-   */
+/**
+ * A taint propagating data flow edge arising from in-place array manipulation operations.
+ * The methods return the pointer to `this` array as well.
+ */
   private class ArrayInPlaceManipulationTaintStep extends TaintTracking::SharedTaintStep {
     override predicate heapStep(DataFlow::Node pred, DataFlow::Node succ) {
       exists(DataFlow::MethodCallNode call |