Skip to content

Commit ef88ece

Browse files
committed
Java: Diff-informed TaintedPermissionsCheck.ql
1 parent eee8b51 commit ef88ece

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

java/ql/lib/semmle/code/java/security/TaintedPermissionsCheckQuery.qll

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,15 @@ module TaintedPermissionsCheckFlowConfig implements DataFlow::ConfigSig {
5959
predicate isSink(DataFlow::Node sink) {
6060
sink.asExpr() = any(PermissionsConstruction p).getInput()
6161
}
62+
63+
predicate observeDiffInformedIncrementalMode() { any() }
64+
65+
Location getASelectedSinkLocation(DataFlow::Node sink) {
66+
exists(PermissionsConstruction p |
67+
sink.asExpr() = p.getInput() and
68+
result = p.getLocation()
69+
)
70+
}
6271
}
6372

6473
/** Tracks flow from user input to a permissions check. */

0 commit comments

Comments
 (0)