[DIFF-INFORMED] Java: LogInjection

https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-117/LogInjection.ql#L20
2026-03-01 21:34:50 +01:00 · 2025-07-16 15:33:38 +02:00
parent 2d734056b1
commit b688df9dec
1 changed files with 4 additions and 0 deletions
--- a/java/ql/lib/semmle/code/java/security/LogInjectionQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/LogInjectionQuery.qll
@@ -19,6 +19,10 @@ module LogInjectionConfig implements DataFlow::ConfigSig {
  }

  predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
+
+  predicate observeDiffInformedIncrementalMode() {
+    none() // straightforward case; but the large test source is causing OOMs under `--check-diff-informed`.
+  }
 }

 /**