[DIFF-INFORMED] Rust: SqlInjection

d10c · d10c · commit 116ca5b13ff1 · 2025-07-16T16:59:39.000+02:00
diff --git a/rust/ql/src/queries/security/CWE-089/SqlInjection.ql b/rust/ql/src/queries/security/CWE-089/SqlInjection.ql
@@ -26,6 +26,8 @@ module SqlInjectionConfig implements DataFlow::ConfigSig {
   predicate isSink(DataFlow::Node node) { node instanceof Sink }
 
   predicate isBarrier(DataFlow::Node barrier) { barrier instanceof Barrier }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
 }
 
 module SqlInjectionFlow = TaintTracking::Global<SqlInjectionConfig>;

Original file line number	Diff line number	Diff line change
`@@ -26,6 +26,8 @@ module SqlInjectionConfig implements DataFlow::ConfigSig {`
`26`	`26`	`predicate isSink(DataFlow::Node node) { node instanceof Sink }`
`27`	`27`
`28`	`28`	`predicate isBarrier(DataFlow::Node barrier) { barrier instanceof Barrier }`
	`29`	`+`
	`30`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
`29`	`31`	`}`
`30`	`32`
`31`	`33`	`module SqlInjectionFlow = TaintTracking::Global<SqlInjectionConfig>;`