[DIFF-INFORMED] Go: ConditionalBypass

d10c · d10c · commit e94b4924b6df · 2025-07-17T10:55:33.000+02:00
diff --git a/go/ql/src/experimental/CWE-840/ConditionalBypass.ql b/go/ql/src/experimental/CWE-840/ConditionalBypass.ql
@@ -22,6 +22,10 @@ module Config implements DataFlow::ConfigSig {
   predicate isSink(DataFlow::Node sink) {
     exists(ComparisonExpr c | c.getAnOperand() = sink.asExpr())
   }
+
+  predicate observeDiffInformedIncrementalMode() {
+    none() // can't override the locations accurately because of secondary use of config.
+  }
 }
 
 /** Tracks taint flow for reasoning about conditional bypass. */

Original file line number	Diff line number	Diff line change
`@@ -22,6 +22,10 @@ module Config implements DataFlow::ConfigSig {`
`22`	`22`	`predicate isSink(DataFlow::Node sink) {`
`23`	`23`	`exists(ComparisonExpr c \| c.getAnOperand() = sink.asExpr())`
`24`	`24`	`}`
	`25`	`+`
	`26`	`+ predicate observeDiffInformedIncrementalMode() {`
	`27`	`+ none() // can't override the locations accurately because of secondary use of config.`
	`28`	`+ }`
`25`	`29`	`}`
`26`	`30`
`27`	`31`	`/** Tracks taint flow for reasoning about conditional bypass. */`