Merge pull request #346 from lostsnow/fix/propagator-empty-target

fixes propagator empty target taint range
HXSecurity · Sep 5, 2022 · d9c2c0f · d9c2c0f
2 parents 35597d6 + f2b2322
commit d9c2c0f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.../src/main/java/io/dongtai/iast/core/handler/hookpoint/controller/impl/PropagatorImpl.java b/.../src/main/java/io/dongtai/iast/core/handler/hookpoint/controller/impl/PropagatorImpl.java
@@ -230,6 +230,10 @@ private static void trackTaintRange(IastPropagatorModel propagator, MethodEvent
             return;
         }
 
+        if (!TaintPoolUtils.isNotEmpty(tgt)) {
+            return;
+        }
+
         TaintRanges tr;
         if (r != null && srcValue != null) {
             tr = r.run(srcValue, tgtValue, event.argumentArray, oldTaintRanges, srcTaintRanges);