CodeQL library for Swift
codeql/swift-all 5.0.7 (changelog, source)
Search

Module ConstantPasswordConfig

A taint configuration from the source of constants passwords to expressions that use them to initialize password-based encryption keys.

Import path

import codeql.swift.security.ConstantPasswordQuery

Predicates

getASelectedSourceLocation

Gets a location that will be associated with the given source in a diff-informed query that uses this configuration (see observeDiffInformedIncrementalMode). By default, this is the location of the source itself, but this predicate should include any locations that are reported as the primary-location of the query or as an additional location (“$@” interpolation). For a query that doesn’t report the source at all, this predicate can be none().

isAdditionalFlowStep

Holds if data may flow from node1 to node2 in addition to the normal data-flow steps.

isBarrier

Holds if data flow through node is prohibited. This completely removes node from the data flow graph.

isBarrierIn

Holds if data flow into node is prohibited.

isSink

Holds if sink is a relevant data flow sink.

isSource

Holds if source is a relevant data flow source.

observeDiffInformedIncrementalMode

Holds if sources and sinks should be filtered to only include those that may lead to a flow path with either a source or a sink in the location range given by AlertFiltering. This only has an effect when running in diff-informed incremental mode.