[DIFF-INFORMED] Rust: CleartextTransmission

d10c · d10c · commit 4916809dc77f · 2025-07-16T16:59:41.000+02:00
diff --git a/rust/ql/src/queries/security/CWE-311/CleartextTransmission.ql b/rust/ql/src/queries/security/CWE-311/CleartextTransmission.ql
@@ -37,6 +37,8 @@ module CleartextTransmissionConfig implements DataFlow::ConfigSig {
     // make sources barriers so that we only report the closest instance
     isSource(node)
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
 }
 
 module CleartextTransmissionFlow = TaintTracking::Global<CleartextTransmissionConfig>;

Original file line number	Diff line number	Diff line change
`@@ -37,6 +37,8 @@ module CleartextTransmissionConfig implements DataFlow::ConfigSig {`
`37`	`37`	`// make sources barriers so that we only report the closest instance`
`38`	`38`	`isSource(node)`
`39`	`39`	`}`
	`40`	`+`
	`41`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
`40`	`42`	`}`
`41`	`43`
`42`	`44`	`module CleartextTransmissionFlow = TaintTracking::Global<CleartextTransmissionConfig>;`