[DIFF-INFORMED] Java: UnsafeCertTrust

d10c · d10c · commit 24c28ed8738b · 2025-07-17T19:02:13.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-273/UnsafeCertTrust.ql#L21
diff --git a/java/ql/lib/semmle/code/java/security/UnsafeCertTrustQuery.qll b/java/ql/lib/semmle/code/java/security/UnsafeCertTrustQuery.qll
@@ -14,6 +14,10 @@ module SslEndpointIdentificationFlowConfig implements DataFlow::ConfigSig {
   predicate isSink(DataFlow::Node sink) { sink instanceof SslConnectionCreation }
 
   predicate isBarrier(DataFlow::Node sanitizer) { sanitizer instanceof SslUnsafeCertTrustSanitizer }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSourceLocation(DataFlow::Node source) { none() }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -14,6 +14,10 @@ module SslEndpointIdentificationFlowConfig implements DataFlow::ConfigSig {`
`14`	`14`	`predicate isSink(DataFlow::Node sink) { sink instanceof SslConnectionCreation }`
`15`	`15`
`16`	`16`	`predicate isBarrier(DataFlow::Node sanitizer) { sanitizer instanceof SslUnsafeCertTrustSanitizer }`
	`17`	`+`
	`18`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`19`	`+`
	`20`	`+ Location getASelectedSourceLocation(DataFlow::Node source) { none() }`
`17`	`21`	`}`
`18`	`22`
`19`	`23`	`/**`