C++/UseOfHttp

d10c · d10c · commit ec63547925ea · 2025-10-28T09:42:03.000+01:00
diff --git a/cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql b/cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql
@@ -91,10 +91,8 @@ module HttpStringToUrlOpenConfig implements DataFlow::ConfigSig {
   predicate observeDiffInformedIncrementalMode() { any() }
 
   Location getASelectedSourceLocation(DataFlow::Node source) {
-    result = source.asIndirectExpr().getLocation()
+    result = [source.asIndirectExpr().getLocation(), source.getLocation()]
   }
-
-  Location getASelectedSinkLocation(DataFlow::Node sink) { none() }
 }
 
 module HttpStringToUrlOpen = TaintTracking::Global<HttpStringToUrlOpenConfig>;

Original file line number	Diff line number	Diff line change
`@@ -91,10 +91,8 @@ module HttpStringToUrlOpenConfig implements DataFlow::ConfigSig {`
`91`	`91`	`predicate observeDiffInformedIncrementalMode() { any() }`
`92`	`92`
`93`	`93`	`Location getASelectedSourceLocation(DataFlow::Node source) {`
`94`		`- result = source.asIndirectExpr().getLocation()`
	`94`	`+ result = [source.asIndirectExpr().getLocation(), source.getLocation()]`
`95`	`95`	`}`
`96`		`-`
`97`		`- Location getASelectedSinkLocation(DataFlow::Node sink) { none() }`
`98`	`96`	`}`
`99`	`97`
`100`	`98`	`module HttpStringToUrlOpen = TaintTracking::Global<HttpStringToUrlOpenConfig>;`