hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Rust: Add sinks as barriers to prevent duplicate results.

Browse Source
This commit is contained in:
Geoffrey White
2025-11-28 17:09:08 +00:00
parent bb50e9fb40
commit faf69b821b
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
rust/ql/src/queries/security/CWE-798/HardcodedCryptographicValue.ql
View File

@@ -39,6 +39,11 @@ module HardcodedCryptographicValueConfig implements DataFlow::ConfigSig {
// case like `[0, 0, 0, 0]`) // case like `[0, 0, 0, 0]`)
isSource(node) isSource(node)
} }
predicate isBarrierOut(DataFlow::Node node) {
// make sinks barriers so that we only report the closest instance
isSink(node)
}
} }
module HardcodedCryptographicValueFlow = TaintTracking::Global<HardcodedCryptographicValueConfig>; module HardcodedCryptographicValueFlow = TaintTracking::Global<HardcodedCryptographicValueConfig>;