Dec 12, 2023 · Dec 11, 2023
diff --git a/c/cert/src/rules/EXP39-C/DoNotAccessVariableViaPointerOfIncompatibleType.ql b/c/cert/src/rules/EXP39-C/DoNotAccessVariableViaPointerOfIncompatibleType.ql
  ReallocationFunction() { exists(this.getReallocPtrArg()) }
 }

 /**
 * A data-flow state for a pointer which has not been reallocated.
 */
 class IndirectCastDefaultFlowState extends DataFlow::FlowState {
  IndirectCastDefaultFlowState() { this = "IndirectCastDefaultFlowState" }
 }

 /**
 * A data-flow state for a pointer which has been reallocated but
 * has not yet been zeroed with a memset call.
 */
 class IndirectCastReallocatedFlowState extends DataFlow::FlowState {
  IndirectCastReallocatedFlowState() { this = "IndirectCastReallocatedFlowState" }
 }
 newtype IndirectCastFlowState =
  /**
   * A data-flow state for a pointer which has not been reallocated.
   */
  IndirectCastDefaultFlowState() or
  /**
   * A data-flow state for a pointer which has been reallocated but
   * has not yet been zeroed with a memset call.
   */
  IndirectCastReallocatedFlowState()

 /**
 * A data-flow configuration to track the flow from cast expressions to either
 * other cast expressions or to dereferences of pointers reallocated with a call
 * to `realloc` but not cleared via a function call to `memset`.
 */
 module IndirectCastConfig implements DataFlow::StateConfigSig {
  class FlowState =DataFlow::FlowState;
  class FlowState =IndirectCastFlowState;

  predicate isSource(DataFlow::Node source, FlowState state) {
    state instanceof IndirectCastDefaultFlowState and
Original file line number	Diff line number	Diff line change
Expand Up		@@ -42,28 +42,24 @@ class ReallocationFunction extends AllocationFunction {
		ReallocationFunction() { exists(this.getReallocPtrArg()) }
		}

		/**
		* A data-flow state for a pointer which has not been reallocated.
		*/
		class IndirectCastDefaultFlowState extends DataFlow::FlowState {
		IndirectCastDefaultFlowState() { this = "IndirectCastDefaultFlowState" }
		}

		/**
		* A data-flow state for a pointer which has been reallocated but
		* has not yet been zeroed with a memset call.
		*/
		class IndirectCastReallocatedFlowState extends DataFlow::FlowState {
		IndirectCastReallocatedFlowState() { this = "IndirectCastReallocatedFlowState" }
		}
		newtype IndirectCastFlowState =
		/**
		* A data-flow state for a pointer which has not been reallocated.
		*/
		IndirectCastDefaultFlowState() or
		/**
		* A data-flow state for a pointer which has been reallocated but
		* has not yet been zeroed with a memset call.
		*/
		IndirectCastReallocatedFlowState()

		/**
		* A data-flow configuration to track the flow from cast expressions to either
		* other cast expressions or to dereferences of pointers reallocated with a call
		* to `realloc` but not cleared via a function call to `memset`.
		*/
		module IndirectCastConfig implements DataFlow::StateConfigSig {
		class FlowState =DataFlow::FlowState;
		class FlowState =IndirectCastFlowState;

		predicate isSource(DataFlow::Node source, FlowState state) {
		state instanceof IndirectCastDefaultFlowState and
Expand Down