C++: TaintedCondition

Author: d10c

cpp/ql/src/Security/CWE/CWE-807/TaintedCondition.ql

@@ -66,8 +66,14 @@ module Config implements DataFlow::ConfigSig {
     )
   }
 
-  predicate observeDiffInformedIncrementalMode() {
-    any() // TODO: Make sure that the location overrides match the query's select clause: Column 7 does not select a source or sink originating from the flow call on line 86 (/Users/d10c/src/semmle-code/ql/cpp/ql/src/Security/CWE/CWE-807/TaintedCondition.ql@88:3:88:7)
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    result = sink.getLocation()
+    or
+    exists(Expr raise | result = raise.getLocation() |
+      sensitiveCondition([sink.asExpr(), sink.asIndirectExpr()], raise)
+    )
   }
 }