C++/AuthenticationBypass

d10c · d10c · commit 17b261a506e1 · 2025-10-28T09:41:43.000+01:00
diff --git a/cpp/ql/src/Security/CWE/CWE-290/AuthenticationBypass.ql b/cpp/ql/src/Security/CWE/CWE-290/AuthenticationBypass.ql
@@ -76,7 +76,9 @@ module Config implements DataFlow::ConfigSig {
   predicate observeDiffInformedIncrementalMode() { any() }
 
   Location getASelectedSinkLocation(DataFlow::Node sink) {
-    exists(Expr condition | result = condition.getLocation() | isSink(sink, condition))
+    exists(Expr condition | result = [condition.getLocation(), sink.getLocation()] |
+      isSink(sink, condition)
+    )
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -76,7 +76,9 @@ module Config implements DataFlow::ConfigSig {`
`76`	`76`	`predicate observeDiffInformedIncrementalMode() { any() }`
`77`	`77`
`78`	`78`	`Location getASelectedSinkLocation(DataFlow::Node sink) {`
`79`		`- exists(Expr condition \| result = condition.getLocation() \| isSink(sink, condition))`
	`79`	`+ exists(Expr condition \| result = [condition.getLocation(), sink.getLocation()] \|`
	`80`	`+ isSink(sink, condition)`
	`81`	`+ )`
`80`	`82`	`}`
`81`	`83`	`}`
`82`	`84`