[DIFF-INFORMED] C++: TaintedPath

d10c · d10c · commit a77cab698189 · 2025-08-15T12:00:54.000+02:00
diff --git a/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql b/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql
@@ -93,6 +93,12 @@ module TaintedPathConfig implements DataFlow::ConfigSig {
     // make sinks barriers so that we only report the closest instance
     isSink(node)
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    result = sink.asIndirectArgument().getLocation()
+  }
 }
 
 module TaintedPath = TaintTracking::Global<TaintedPathConfig>;

Original file line number	Diff line number	Diff line change
`@@ -93,6 +93,12 @@ module TaintedPathConfig implements DataFlow::ConfigSig {`
`93`	`93`	`// make sinks barriers so that we only report the closest instance`
`94`	`94`	`isSink(node)`
`95`	`95`	`}`
	`96`	`+`
	`97`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`98`	`+`
	`99`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`100`	`+ result = sink.asIndirectArgument().getLocation()`
	`101`	`+ }`
`96`	`102`	`}`
`97`	`103`
`98`	`104`	`module TaintedPath = TaintTracking::Global<TaintedPathConfig>;`