C++/UnboundedWrite

d10c · d10c · commit 2756e8255fe2 · 2025-10-28T09:41:35.000+01:00
diff --git a/cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.ql b/cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.ql
@@ -128,7 +128,7 @@ module Config implements DataFlow::ConfigSig {
   predicate observeDiffInformedIncrementalMode() { any() }
 
   Location getASelectedSinkLocation(DataFlow::Node sink) {
-    exists(BufferWrite bw | result = bw.getLocation() | isSink(sink, bw, _))
+    exists(BufferWrite bw | result = [bw.getLocation(), sink.getLocation()] | isSink(sink, bw, _))
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -128,7 +128,7 @@ module Config implements DataFlow::ConfigSig {`
`128`	`128`	`predicate observeDiffInformedIncrementalMode() { any() }`
`129`	`129`
`130`	`130`	`Location getASelectedSinkLocation(DataFlow::Node sink) {`
`131`		`- exists(BufferWrite bw \| result = bw.getLocation() \| isSink(sink, bw, _))`
	`131`	`+ exists(BufferWrite bw \| result = [bw.getLocation(), sink.getLocation()] \| isSink(sink, bw, _))`
`132`	`132`	`}`
`133`	`133`	`}`
`134`	`134`