[DIFF-INFORMED] Java: TempDirLocalInformationDisclosure

d10c · d10c · commit 7888dcbce2d6 · 2025-07-17T19:02:07.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.ql#L56
diff --git a/java/ql/lib/semmle/code/java/security/TempDirLocalInformationDisclosureQuery.qll b/java/ql/lib/semmle/code/java/security/TempDirLocalInformationDisclosureQuery.qll
@@ -145,6 +145,10 @@ module TempDirSystemGetPropertyToCreateConfig implements DataFlow::ConfigSig {
     or
     sanitizer instanceof WindowsOsSanitizer
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) { none() }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -145,6 +145,10 @@ module TempDirSystemGetPropertyToCreateConfig implements DataFlow::ConfigSig {`
`145`	`145`	`or`
`146`	`146`	`sanitizer instanceof WindowsOsSanitizer`
`147`	`147`	`}`
	`148`	`+`
	`149`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`150`	`+`
	`151`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) { none() }`
`148`	`152`	`}`
`149`	`153`
`150`	`154`	`/**`