C# operator "?" (inline if) and null dereference

Hi all,

I'm performing security fixes in a quite large C# application and there are hundreds of Null Dereference issues, many of them are like the example below:

Inside an .aspx file:

            <td width="<%= booleanVariable ? "35%" : "" %>">test</td>

We've found out that everytime an aspx page contains an inline if (operator "?") like the example above, Fortify finds a Null Dereference issue. In the example above booleanVariable is not nullable, so it cannot be null by any means.

Do you know any way of solving this issue with a rule or any other way which doesn't require modifying the source code?

Regards,

Javier