Java: Diff-informed InsecureTrustManager.ql

2026-04-17 21:14:02 +02:00 · 2024-10-05 21:49:05 +02:00
parent eac1a4c002
commit 8224ef6929
1 changed files with 11 additions and 0 deletions
--- a/java/ql/lib/semmle/code/java/security/InsecureTrustManagerQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/InsecureTrustManagerQuery.qll
@@ -18,6 +18,17 @@ module InsecureTrustManagerConfig implements DataFlow::ConfigSig {
    node.getType() instanceof Array and
    c instanceof DataFlow::ArrayContent
  }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSourceLocation(DataFlow::Node source) {
+    isSource(source) and
+    (
+      result = source.getLocation()
+      or
+      result = source.asExpr().(ClassInstanceExpr).getConstructedType().getLocation()
+    )
+  }
 }

 module InsecureTrustManagerFlow = DataFlow::Global<InsecureTrustManagerConfig>;