Java/TaintedPermissionsCheckQuery

java/ql/src/Security/CWE/CWE-807/TaintedPermissionsCheck.ql
2025-12-16 16:53:25 +01:00 · 2025-10-09 14:14:10 +02:00
parent 697f428eae
commit 2a889f4f98
1 changed files with 3 additions and 2 deletions
--- a/java/ql/lib/semmle/code/java/security/TaintedPermissionsCheckQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/TaintedPermissionsCheckQuery.qll
@@ -63,8 +63,9 @@ module TaintedPermissionsCheckFlowConfig implements DataFlow::ConfigSig {
  predicate observeDiffInformedIncrementalMode() { any() }

  Location getASelectedSinkLocation(DataFlow::Node sink) {
-    exists(PermissionsConstruction p |
-      sink.asExpr() = p.getInput() and
+    exists(PermissionsConstruction p | sink.asExpr() = p.getInput() |
+      result = sink.getLocation()
+      or
      result = p.getLocation()
    )
  }