C++: TaintedPath

d10c · d10c · commit 87889d6b8906 · 2025-07-11T14:42:00.000+02:00
diff --git a/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql b/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql
@@ -94,8 +94,10 @@ module TaintedPathConfig implements DataFlow::ConfigSig {
     isSink(node)
   }
 
-  predicate observeDiffInformedIncrementalMode() {
-    any() // TODO: Make sure that the location overrides match the query's select clause: Column 1 selects sink.asIndirectArgument (/Users/d10c/src/semmle-code/ql/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql@108:8:108:17)
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    result = sink.asIndirectArgument().getLocation()
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -94,8 +94,10 @@ module TaintedPathConfig implements DataFlow::ConfigSig {`
`94`	`94`	`isSink(node)`
`95`	`95`	`}`
`96`	`96`
`97`		`- predicate observeDiffInformedIncrementalMode() {`
`98`		`- any() // TODO: Make sure that the location overrides match the query's select clause: Column 1 selects sink.asIndirectArgument (/Users/d10c/src/semmle-code/ql/cpp/ql/src/Security/CWE/CWE-022/TaintedPath.ql@108:8:108:17)`
	`97`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`98`	`+`
	`99`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`100`	`+ result = sink.asIndirectArgument().getLocation()`
`99`	`101`	`}`
`100`	`102`	`}`
`101`	`103`