[DIFF-INFORMED] Go: InsecureRandomness

d10c · d10c · commit 4b473622bc26 · 2025-07-17T11:46:39.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/go/ql/src/Security/CWE-338/InsecureRandomness.ql#L19
diff --git a/go/ql/lib/semmle/go/security/InsecureRandomness.qll b/go/ql/lib/semmle/go/security/InsecureRandomness.qll
@@ -39,6 +39,10 @@ module InsecureRandomness {
         n2.getType() instanceof IntegerType
       )
     }
+
+    predicate observeDiffInformedIncrementalMode() {
+      none() // Can't have accurate sink location override because of secondary use of `flowPath` in select.
+    }
   }
 
   /**

Original file line number	Diff line number	Diff line change
`@@ -39,6 +39,10 @@ module InsecureRandomness {`
`39`	`39`	`n2.getType() instanceof IntegerType`
`40`	`40`	`)`
`41`	`41`	`}`
	`42`	`+`
	`43`	`+ predicate observeDiffInformedIncrementalMode() {`
	`44`	+ none() // Can't have accurate sink location override because of secondary use of `flowPath` in select.
	`45`	`+ }`
`42`	`46`	`}`
`43`	`47`
`44`	`48`	`/**`