C++/CleartextBufferWrite

d10c · d10c · commit d89aa0f19daf · 2025-10-28T09:41:46.000+01:00
diff --git a/cpp/ql/src/Security/CWE/CWE-311/CleartextBufferWrite.ql b/cpp/ql/src/Security/CWE/CWE-311/CleartextBufferWrite.ql
@@ -51,7 +51,9 @@ module ToBufferConfig implements DataFlow::ConfigSig {
   predicate observeDiffInformedIncrementalMode() { any() }
 
   Location getASelectedSinkLocation(DataFlow::Node sink) {
-    exists(SensitiveBufferWrite w | result = w.getLocation() | isSinkImpl(sink, w))
+    exists(SensitiveBufferWrite w | result = [w.getLocation(), sink.getLocation()] |
+      isSinkImpl(sink, w)
+    )
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -51,7 +51,9 @@ module ToBufferConfig implements DataFlow::ConfigSig {`
`51`	`51`	`predicate observeDiffInformedIncrementalMode() { any() }`
`52`	`52`
`53`	`53`	`Location getASelectedSinkLocation(DataFlow::Node sink) {`
`54`		`- exists(SensitiveBufferWrite w \| result = w.getLocation() \| isSinkImpl(sink, w))`
	`54`	`+ exists(SensitiveBufferWrite w \| result = [w.getLocation(), sink.getLocation()] \|`
	`55`	`+ isSinkImpl(sink, w)`
	`56`	`+ )`
`55`	`57`	`}`
`56`	`58`	`}`
`57`	`59`