Java/ConditionalBypass

java/ql/src/Security/CWE/CWE-807/ConditionalBypass.ql

Author: d10c

java/ql/lib/semmle/code/java/security/ConditionalBypassQuery.qll

@@ -51,6 +51,8 @@ module ConditionalBypassFlowConfig implements DataFlow::ConfigSig {
   predicate observeDiffInformedIncrementalMode() { any() }
 
   Location getASelectedSinkLocation(DataFlow::Node sink) {
+    result = sink.getLocation()
+    or
     exists(MethodCall m, Expr e | result = [m, e].getLocation() |
       conditionControlsMethod(m, e) and
       sink.asExpr() = e