[DIFF-INFORMED] Go: IncorrectIntegerConversion

d10c · d10c · commit 53f4c94aaeba · 2025-07-17T10:55:25.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/go/ql/src/Security/CWE-681/IncorrectIntegerConversionQuery.ql#L23
diff --git a/go/ql/lib/semmle/go/security/IncorrectIntegerConversionLib.qll b/go/ql/lib/semmle/go/security/IncorrectIntegerConversionLib.qll
@@ -440,6 +440,12 @@ private module ConversionWithoutBoundsCheckConfig implements DataFlow::StateConf
     state2 = node2.(FlowStateTransformer).transform(state1) and
     DataFlow::simpleLocalFlowStep(node1, node2, _)
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    result = sink.getASuccessor().getLocation()
+  }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -440,6 +440,12 @@ private module ConversionWithoutBoundsCheckConfig implements DataFlow::StateConf`
`440`	`440`	`state2 = node2.(FlowStateTransformer).transform(state1) and`
`441`	`441`	`DataFlow::simpleLocalFlowStep(node1, node2, _)`
`442`	`442`	`}`
	`443`	`+`
	`444`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`445`	`+`
	`446`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`447`	`+ result = sink.getASuccessor().getLocation()`
	`448`	`+ }`
`443`	`449`	`}`
`444`	`450`
`445`	`451`	`/**`