[DIFF-INFORMED] C++: ImproperNullTerminationTainted

d10c · d10c · commit 62fa7301c311 · 2025-08-15T12:01:05.000+02:00
diff --git a/cpp/ql/src/Security/CWE/CWE-170/ImproperNullTerminationTainted.ql b/cpp/ql/src/Security/CWE/CWE-170/ImproperNullTerminationTainted.ql
@@ -43,6 +43,12 @@ private module Config implements DataFlow::ConfigSig {
   }
 
   predicate isSink(DataFlow::Node sink) { isSink(sink, _) }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    exists(VariableAccess va | result = va.getLocation() | isSink(sink, va))
+  }
 }
 
 module Flow = TaintTracking::Global<Config>;

Original file line number	Diff line number	Diff line change
`@@ -43,6 +43,12 @@ private module Config implements DataFlow::ConfigSig {`
`43`	`43`	`}`
`44`	`44`
`45`	`45`	`predicate isSink(DataFlow::Node sink) { isSink(sink, _) }`
	`46`	`+`
	`47`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`48`	`+`
	`49`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`50`	`+ exists(VariableAccess va \| result = va.getLocation() \| isSink(sink, va))`
	`51`	`+ }`
`46`	`52`	`}`
`47`	`53`
`48`	`54`	`module Flow = TaintTracking::Global<Config>;`