C++/CleartextTransmission

d10c · d10c · commit bbe2bf2b7fa0 · 2025-10-28T09:41:52.000+01:00
diff --git a/cpp/ql/src/Security/CWE/CWE-311/CleartextTransmission.ql b/cpp/ql/src/Security/CWE/CWE-311/CleartextTransmission.ql
@@ -249,7 +249,9 @@ module FromSensitiveConfig implements DataFlow::ConfigSig {
   predicate observeDiffInformedIncrementalMode() { any() }
 
   Location getASelectedSinkLocation(DataFlow::Node sink) {
-    exists(NetworkSendRecv networkSendRecv | result = networkSendRecv.getLocation() |
+    exists(NetworkSendRecv networkSendRecv |
+      result = [networkSendRecv.getLocation(), sink.getLocation()]
+    |
       isSinkSendRecv(sink, networkSendRecv)
     )
   }

Original file line number	Diff line number	Diff line change
`@@ -249,7 +249,9 @@ module FromSensitiveConfig implements DataFlow::ConfigSig {`
`249`	`249`	`predicate observeDiffInformedIncrementalMode() { any() }`
`250`	`250`
`251`	`251`	`Location getASelectedSinkLocation(DataFlow::Node sink) {`
`252`		`- exists(NetworkSendRecv networkSendRecv \| result = networkSendRecv.getLocation() \|`
	`252`	`+ exists(NetworkSendRecv networkSendRecv \|`
	`253`	`+ result = [networkSendRecv.getLocation(), sink.getLocation()]`
	`254`	`+ \|`
`253`	`255`	`isSinkSendRecv(sink, networkSendRecv)`
`254`	`256`	`)`
`255`	`257`	`}`