mirror of
https://github.com/github/codeql.git
synced 2026-05-05 21:55:19 +02:00
@@ -1073,11 +1073,11 @@ private module GetConvertedResultExpression {
|
||||
/**
|
||||
* Gets the expression that should be returned as the result expression from `instr`.
|
||||
*
|
||||
* Note that this predicate may return multiple results in cases where a conversion belond to a
|
||||
* Note that this predicate may return multiple results in cases where a conversion belongs to a
|
||||
* different AST element than its operand.
|
||||
*/
|
||||
Expr getConvertedResultExpression(Instruction instr, int n) {
|
||||
// Only fully converted instructions has a result for `asConvertedExpr`
|
||||
// Only fully converted instructions have a result for `asConvertedExpr`
|
||||
not conversionFlow(unique(Operand op |
|
||||
// The address operand of a `InitializeDynamicAllocationInstruction` is
|
||||
// special: we need to handle it during dataflow (since it's
|
||||
|
||||
@@ -30,7 +30,7 @@ private class DefaultCleartextLoggingSink extends CleartextLoggingSink {
|
||||
}
|
||||
|
||||
/**
|
||||
* An barrier for cleartext logging vulnerabilities.
|
||||
* A barrier for cleartext logging vulnerabilities.
|
||||
* - encryption; encrypted values are not cleartext.
|
||||
* - booleans; these are more likely to be settings, rather than actual sensitive data.
|
||||
*/
|
||||
|
||||
@@ -114,7 +114,7 @@ private class CleartextStorageDatabaseSinks extends SinkModelCsv {
|
||||
}
|
||||
|
||||
/**
|
||||
* An barrier for cleartext database storage vulnerabilities.
|
||||
* A barrier for cleartext database storage vulnerabilities.
|
||||
* - encryption; encrypted values are not cleartext.
|
||||
* - booleans; these are more likely to be settings, rather than actual sensitive data.
|
||||
*/
|
||||
|
||||
@@ -78,7 +78,7 @@ private class NSUserDefaultsControllerStore extends CleartextStoragePreferencesS
|
||||
}
|
||||
|
||||
/**
|
||||
* An barrier for cleartext preferences storage vulnerabilities.
|
||||
* A barrier for cleartext preferences storage vulnerabilities.
|
||||
* - encryption; encrypted values are not cleartext.
|
||||
* - booleans; these are more likely to be settings, rather than actual sensitive data.
|
||||
*/
|
||||
|
||||
@@ -49,7 +49,7 @@ private class AlamofireTransmittedSink extends CleartextTransmissionSink {
|
||||
}
|
||||
|
||||
/**
|
||||
* An barrier for cleartext transmission vulnerabilities.
|
||||
* A barrier for cleartext transmission vulnerabilities.
|
||||
* - encryption; encrypted values are not cleartext.
|
||||
* - booleans; these are more likely to be settings, rather than actual sensitive data.
|
||||
*/
|
||||
|
||||
Reference in New Issue
Block a user