mirror of
https://github.com/github/codeql.git
synced 2025-12-20 18:56:32 +01:00
C#/Java: Add isRelevantSinkKind predicate with language specific implementation.
This commit is contained in:
@@ -163,7 +163,7 @@ string captureSink(TargetApi api) {
|
||||
config.hasFlow(src, sink) and
|
||||
ExternalFlow::sinkNode(sink, kind) and
|
||||
api = src.getEnclosingCallable() and
|
||||
not kind = "logging" and
|
||||
isRelevantSinkKind(kind) and
|
||||
result = asSinkModel(api, asInputArgument(src), kind)
|
||||
)
|
||||
}
|
||||
|
||||
@@ -61,6 +61,12 @@ string asInputArgument(DataFlow::Node source) {
|
||||
result = qualifierString()
|
||||
}
|
||||
|
||||
/**
|
||||
* Holds if `kind` is a relevant sink kind for creating sink models.
|
||||
*/
|
||||
bindingset[kind]
|
||||
predicate isRelevantSinkKind(string kind) { not kind = "logging" }
|
||||
|
||||
module DataFlowImplCommon {
|
||||
predicate store = Dfic::store/4;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user