File tree Expand file tree Collapse file tree 1 file changed +7
-1
lines changed
rust/ql/src/queries/summary Expand file tree Collapse file tree 1 file changed +7
-1
lines changed Original file line number Diff line number Diff line change 22 * @name Query Sinks
33 * @description Lists query sinks that are found in the database. Query sinks are flow sinks that
44 * are used as possible locations for query results. Cryptographic operations are
5- * excluded (see `rust/summary/cryptographic-operations` instead).
5+ * excluded (see `rust/summary/cryptographic-operations` instead), as are certain
6+ * sink types that are ubiquitous in most code.
67 * @kind problem
78 * @problem.severity info
89 * @id rust/summary/query-sinks
@@ -13,6 +14,11 @@ import rust
1314import codeql.rust.dataflow.DataFlow
1415import codeql.rust.Concepts
1516import Stats
17+ import codeql.rust.security.AccessInvalidPointerExtensions
18+ import codeql.rust.security.CleartextLoggingExtensions
1619
1720from QuerySink s
21+ where
22+ not s instanceof AccessInvalidPointer:: Sink and
23+ not s instanceof CleartextLogging:: Sink
1824select s , "Sink for " + concat ( s .getSinkType ( ) , ", " ) + "."
You can’t perform that action at this time.
0 commit comments