diff --git a/src/plugins/value/domains/taint_domain.ml b/src/plugins/value/domains/taint_domain.ml index 9500b3ed68d9e044e5ce7085f40741cec9ff9690..c4ab2b01ecc7fbb25a10f70ab7e85aab6ee9046d 100644 --- a/src/plugins/value/domains/taint_domain.ml +++ b/src/plugins/value/domains/taint_domain.ml @@ -207,7 +207,7 @@ module TransferTaint = struct let lv_zone, lv_indirect_zone, singleton = compute_zones lval to_loc in let exp_zone = Value_util.zone_of_expr to_loc exp in (* [lv] becomes data-tainted if a memory location on which the value of - [exp] is data-tainted. *) + [exp] depends on is data-tainted. *) let data_tainted = Zone.intersects state.locs_data exp_zone in (* [lv] becomes control-tainted if: - the current call depends on a tainted assume statements of a caller;