[DIFF-INFORMED] C++: TaintedCondition

d10c · d10c · commit 5b9e37cd8f2c · 2025-08-15T12:01:28.000+02:00
diff --git a/cpp/ql/src/Security/CWE/CWE-807/TaintedCondition.ql b/cpp/ql/src/Security/CWE/CWE-807/TaintedCondition.ql
@@ -65,6 +65,16 @@ module Config implements DataFlow::ConfigSig {
       iFrom1 != iFrom2
     )
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    result = sink.getLocation()
+    or
+    exists(Expr raise | result = raise.getLocation() |
+      sensitiveCondition([sink.asExpr(), sink.asIndirectExpr()], raise)
+    )
+  }
 }
 
 module Flow = TaintTracking::Global<Config>;

Original file line number	Diff line number	Diff line change
`@@ -65,6 +65,16 @@ module Config implements DataFlow::ConfigSig {`
`65`	`65`	`iFrom1 != iFrom2`
`66`	`66`	`)`
`67`	`67`	`}`
	`68`	`+`
	`69`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`70`	`+`
	`71`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`72`	`+ result = sink.getLocation()`
	`73`	`+ or`
	`74`	`+ exists(Expr raise \| result = raise.getLocation() \|`
	`75`	`+ sensitiveCondition([sink.asExpr(), sink.asIndirectExpr()], raise)`
	`76`	`+ )`
	`77`	`+ }`
`68`	`78`	`}`
`69`	`79`
`70`	`80`	`module Flow = TaintTracking::Global<Config>;`