[DIFF-INFORMED] C++: TaintedCondition

2025-12-16 16:53:25 +01:00 · 2025-07-16 10:35:35 +02:00
parent 0c636dd400
commit 5b9e37cd8f
1 changed files with 10 additions and 0 deletions
--- a/cpp/ql/src/Security/CWE/CWE-807/TaintedCondition.ql
+++ b/cpp/ql/src/Security/CWE/CWE-807/TaintedCondition.ql
@@ -65,6 +65,16 @@ module Config implements DataFlow::ConfigSig {
      iFrom1 != iFrom2
    )
  }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    result = sink.getLocation()
+    or
+    exists(Expr raise | result = raise.getLocation() |
+      sensitiveCondition([sink.asExpr(), sink.asIndirectExpr()], raise)
+    )
+  }
 }

 module Flow = TaintTracking::Global<Config>;