[DIFF-INFORMED] Rust: CleartextLogging

d10c · d10c · commit fcc38007567b · 2025-07-23T14:52:07.000+02:00
diff --git a/rust/ql/src/queries/security/CWE-312/CleartextLogging.ql b/rust/ql/src/queries/security/CWE-312/CleartextLogging.ql
@@ -45,6 +45,8 @@ module CleartextLoggingConfig implements DataFlow::ConfigSig {
     isSink(node) and
     c.getAReadContent() instanceof DataFlow::TuplePositionContent
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
 }
 
 module CleartextLoggingFlow = TaintTracking::Global<CleartextLoggingConfig>;

Original file line number	Diff line number	Diff line change
`@@ -45,6 +45,8 @@ module CleartextLoggingConfig implements DataFlow::ConfigSig {`
`45`	`45`	`isSink(node) and`
`46`	`46`	`c.getAReadContent() instanceof DataFlow::TuplePositionContent`
`47`	`47`	`}`
	`48`	`+`
	`49`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
`48`	`50`	`}`
`49`	`51`
`50`	`52`	`module CleartextLoggingFlow = TaintTracking::Global<CleartextLoggingConfig>;`