File tree Expand file tree Collapse file tree 1 file changed +7
-1
lines changed
rust/ql/src/queries/summary Expand file tree Collapse file tree 1 file changed +7
-1
lines changed Original file line number Diff line number Diff line change 2
2
* @name Query Sinks
3
3
* @description Lists query sinks that are found in the database. Query sinks are flow sinks that
4
4
* are used as possible locations for query results. Cryptographic operations are
5
- * excluded (see `rust/summary/cryptographic-operations` instead).
5
+ * excluded (see `rust/summary/cryptographic-operations` instead), as are certain
6
+ * sink types that are ubiquitous in most code.
6
7
* @kind problem
7
8
* @problem.severity info
8
9
* @id rust/summary/query-sinks
@@ -13,6 +14,11 @@ import rust
13
14
import codeql.rust.dataflow.DataFlow
14
15
import codeql.rust.Concepts
15
16
import Stats
17
+ import codeql.rust.security.AccessInvalidPointerExtensions
18
+ import codeql.rust.security.CleartextLoggingExtensions
16
19
17
20
from QuerySink s
21
+ where
22
+ not s instanceof AccessInvalidPointer:: Sink and
23
+ not s instanceof CleartextLogging:: Sink
18
24
select s , "Sink for " + concat ( s .getSinkType ( ) , ", " ) + "."
You can’t perform that action at this time.
0 commit comments