[DIFF-INFORMED] C++: UnboundedWrite

d10c · d10c · commit f3098e769542 · 2025-08-15T12:01:03.000+02:00
diff --git a/cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.ql b/cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.ql
@@ -124,6 +124,12 @@ module Config implements DataFlow::ConfigSig {
     // Block flow if the node is guarded by any <, <= or = operations.
     node = DataFlow::BarrierGuard<lessThanOrEqual/3>::getABarrierNode()
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    exists(BufferWrite bw | result = bw.getLocation() | isSink(sink, bw, _))
+  }
 }
 
 module Flow = TaintTracking::Global<Config>;

Original file line number	Diff line number	Diff line change
`@@ -124,6 +124,12 @@ module Config implements DataFlow::ConfigSig {`
`124`	`124`	`// Block flow if the node is guarded by any <, <= or = operations.`
`125`	`125`	`node = DataFlow::BarrierGuard<lessThanOrEqual/3>::getABarrierNode()`
`126`	`126`	`}`
	`127`	`+`
	`128`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`129`	`+`
	`130`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`131`	`+ exists(BufferWrite bw \| result = bw.getLocation() \| isSink(sink, bw, _))`
	`132`	`+ }`
`127`	`133`	`}`
`128`	`134`
`129`	`135`	`module Flow = TaintTracking::Global<Config>;`