[DIFF-INFORMED] Java: TaintedEnvironmentVariable

d10c · d10c · commit 0d49984a44ca · 2025-07-17T14:34:02.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironment.ql#L22
diff --git a/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll b/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll
@@ -38,6 +38,10 @@ module ExecTaintedEnvironmentConfig implements DataFlow::ConfigSig {
       ProcessBuilderEnvironmentFlow::flowToExpr(mm.getQualifier())
     )
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSourceLocation(DataFlow::Node source) { none() }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -38,6 +38,10 @@ module ExecTaintedEnvironmentConfig implements DataFlow::ConfigSig {`
`38`	`38`	`ProcessBuilderEnvironmentFlow::flowToExpr(mm.getQualifier())`
`39`	`39`	`)`
`40`	`40`	`}`
	`41`	`+`
	`42`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`43`	`+`
	`44`	`+ Location getASelectedSourceLocation(DataFlow::Node source) { none() }`
`41`	`45`	`}`
`42`	`46`
`43`	`47`	`/**`