[DIFF-INFORMED] Java: (Android)SensitiveCommunication

d10c · d10c · commit 6d454bcc0103 · 2025-07-16T17:33:32.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-927/SensitiveCommunication.ql#L20
diff --git a/java/ql/lib/semmle/code/java/security/AndroidSensitiveCommunicationQuery.qll b/java/ql/lib/semmle/code/java/security/AndroidSensitiveCommunicationQuery.qll
@@ -149,6 +149,8 @@ module SensitiveCommunicationConfig implements DataFlow::ConfigSig {
   predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {
     isSink(node) and exists(c)
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -149,6 +149,8 @@ module SensitiveCommunicationConfig implements DataFlow::ConfigSig {`
`149`	`149`	`predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {`
`150`	`150`	`isSink(node) and exists(c)`
`151`	`151`	`}`
	`152`	`+`
	`153`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
`152`	`154`	`}`
`153`	`155`
`154`	`156`	`/**`