[DIFF-INFORMED] C++: InsufficientKeySize

d10c · d10c · commit ec85e5506929 · 2025-08-15T12:01:19.000+02:00
diff --git a/cpp/ql/src/Security/CWE/CWE-326/InsufficientKeySize.ql b/cpp/ql/src/Security/CWE/CWE-326/InsufficientKeySize.ql
@@ -44,6 +44,12 @@ module KeyStrengthFlowConfig implements DataFlow::ConfigSig {
       exists(getMinimumKeyStrength(name, param))
     )
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    exists(FunctionCall fc | result = fc.getLocation() | sink.asExpr() = fc.getArgument(_))
+  }
 }
 
 module KeyStrengthFlow = DataFlow::Global<KeyStrengthFlowConfig>;

Original file line number	Diff line number	Diff line change
`@@ -44,6 +44,12 @@ module KeyStrengthFlowConfig implements DataFlow::ConfigSig {`
`44`	`44`	`exists(getMinimumKeyStrength(name, param))`
`45`	`45`	`)`
`46`	`46`	`}`
	`47`	`+`
	`48`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`49`	`+`
	`50`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`51`	`+ exists(FunctionCall fc \| result = fc.getLocation() \| sink.asExpr() = fc.getArgument(_))`
	`52`	`+ }`
`47`	`53`	`}`
`48`	`54`
`49`	`55`	`module KeyStrengthFlow = DataFlow::Global<KeyStrengthFlowConfig>;`