Merge pull request #18737 from jbj/NumericCastTaintedQuery-selectedLo…

…cation Java: precise diff-informed NumericCastTainted
github · Feb 11, 2025 · 7644012 · 7644012
2 parents 5a49390 + 71c078d
commit 7644012
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/java/ql/lib/semmle/code/java/security/NumericCastTaintedQuery.qll b/java/ql/lib/semmle/code/java/security/NumericCastTaintedQuery.qll
@@ -104,6 +104,13 @@ module NumericCastFlowConfig implements DataFlow::ConfigSig {
   predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
 
   predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    exists(NumericNarrowingCastExpr cast |
+      cast.getExpr() = sink.asExpr() and
+      result = cast.getLocation()
+    )
+  }
 }
 
 /**