[DIFF-INFORMED] C++: UseOfHttp

d10c · d10c · commit c0c96eaf5b88 · 2025-08-15T12:01:17.000+02:00
diff --git a/cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql b/cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql
@@ -87,6 +87,14 @@ module HttpStringToUrlOpenConfig implements DataFlow::ConfigSig {
       sink.asIndirectExpr() = fc.getArgument(3)
     )
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSourceLocation(DataFlow::Node source) {
+    result = source.asIndirectExpr().getLocation()
+  }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) { none() }
 }
 
 module HttpStringToUrlOpen = TaintTracking::Global<HttpStringToUrlOpenConfig>;

Original file line number	Diff line number	Diff line change
`@@ -87,6 +87,14 @@ module HttpStringToUrlOpenConfig implements DataFlow::ConfigSig {`
`87`	`87`	`sink.asIndirectExpr() = fc.getArgument(3)`
`88`	`88`	`)`
`89`	`89`	`}`
	`90`	`+`
	`91`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`92`	`+`
	`93`	`+ Location getASelectedSourceLocation(DataFlow::Node source) {`
	`94`	`+ result = source.asIndirectExpr().getLocation()`
	`95`	`+ }`
	`96`	`+`
	`97`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) { none() }`
`90`	`98`	`}`
`91`	`99`
`92`	`100`	`module HttpStringToUrlOpen = TaintTracking::Global<HttpStringToUrlOpenConfig>;`