Allow MaD sanitizers for java/static-initialization-vector

owen-mc · owen-mc · commit 408872144790 · 2026-01-08T15:23:38.000Z
diff --git a/java/ql/lib/semmle/code/java/security/StaticInitializationVectorQuery.qll b/java/ql/lib/semmle/code/java/security/StaticInitializationVectorQuery.qll
@@ -128,6 +128,8 @@ module StaticInitializationVectorConfig implements DataFlow::ConfigSig {
 
   predicate isSink(DataFlow::Node sink) { sink instanceof EncryptionInitializationSink }
 
+  predicate isBarrier(DataFlow::Node node) { barrierNode(node, "encryption-iv") }
+
   predicate observeDiffInformedIncrementalMode() { any() }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -128,6 +128,8 @@ module StaticInitializationVectorConfig implements DataFlow::ConfigSig {`
`128`	`128`
`129`	`129`	`predicate isSink(DataFlow::Node sink) { sink instanceof EncryptionInitializationSink }`
`130`	`130`
	`131`	`+ predicate isBarrier(DataFlow::Node node) { barrierNode(node, "encryption-iv") }`
	`132`	`+`
`131`	`133`	`predicate observeDiffInformedIncrementalMode() { any() }`
`132`	`134`	`}`
`133`	`135`