[DIFF-INFORMED] Java: LogInjection

d10c · d10c · commit 650a5dd5ce9b · 2025-07-17T10:55:56.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-117/LogInjection.ql#L20
diff --git a/java/ql/lib/semmle/code/java/security/LogInjectionQuery.qll b/java/ql/lib/semmle/code/java/security/LogInjectionQuery.qll
@@ -19,6 +19,10 @@ module LogInjectionConfig implements DataFlow::ConfigSig {
   }
 
   predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
+
+  predicate observeDiffInformedIncrementalMode() {
+    none() // straightforward case; but the large test source is causing OOMs under `--check-diff-informed`.
+  }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -19,6 +19,10 @@ module LogInjectionConfig implements DataFlow::ConfigSig {`
`19`	`19`	`}`
`20`	`20`
`21`	`21`	`predicate isBarrierIn(DataFlow::Node node) { isSource(node) }`
	`22`	`+`
	`23`	`+ predicate observeDiffInformedIncrementalMode() {`
	`24`	+ none() // straightforward case; but the large test source is causing OOMs under `--check-diff-informed`.
	`25`	`+ }`
`22`	`26`	`}`
`23`	`27`
`24`	`28`	`/**`