[DIFF-INFORMED] Go: SensitiveConditionBypass

d10c · d10c · commit cccf6e644b6a · 2025-07-17T10:55:31.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/go/ql/src/experimental/CWE-807/SensitiveConditionBypass.ql#L33
diff --git a/go/ql/src/experimental/CWE-807/SensitiveConditionBypass.qll b/go/ql/src/experimental/CWE-807/SensitiveConditionBypass.qll
@@ -59,6 +59,14 @@ private module Config implements DataFlow::ConfigSig {
       not c.isPotentialFalsePositive()
     )
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSourceLocation(DataFlow::Node source) { none() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    exists(ComparisonExpr comp | result = comp.getLocation() | sink.asExpr() = comp.getAnOperand())
+  }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -59,6 +59,14 @@ private module Config implements DataFlow::ConfigSig {`
`59`	`59`	`not c.isPotentialFalsePositive()`
`60`	`60`	`)`
`61`	`61`	`}`
	`62`	`+`
	`63`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`64`	`+`
	`65`	`+ Location getASelectedSourceLocation(DataFlow::Node source) { none() }`
	`66`	`+`
	`67`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`68`	`+ exists(ComparisonExpr comp \| result = comp.getLocation() \| sink.asExpr() = comp.getAnOperand())`
	`69`	`+ }`
`62`	`70`	`}`
`63`	`71`
`64`	`72`	`/**`