File tree Expand file tree Collapse file tree 1 file changed +8
-5
lines changed
cpp/ql/lib/semmle/code/cpp/security Expand file tree Collapse file tree 1 file changed +8
-5
lines changed Original file line number Diff line number Diff line change 1
1
/**
2
2
* Provides classes for heuristically identifying variables and functions that
3
- * might contain or return a password or other sensitive information.
3
+ * might contain or return a password or other credential.
4
+ *
5
+ * This library is not concerned with other kinds of sensitive private
6
+ * information. See `PrivateData.qll` for expressions related to that.
4
7
*/
5
8
6
9
import cpp
7
10
8
11
/**
9
12
* Holds if the name `s` suggests something might contain or return a password
10
- * or other sensitive information .
13
+ * or other credential .
11
14
*/
12
15
bindingset [ s]
13
16
private predicate suspicious ( string s ) {
@@ -16,7 +19,7 @@ private predicate suspicious(string s) {
16
19
}
17
20
18
21
/**
19
- * A variable that might contain a password or other sensitive information .
22
+ * A variable that might contain a password or other credential .
20
23
*/
21
24
class SensitiveVariable extends Variable {
22
25
SensitiveVariable ( ) {
@@ -26,7 +29,7 @@ class SensitiveVariable extends Variable {
26
29
}
27
30
28
31
/**
29
- * A function that might return a password or other sensitive information .
32
+ * A function that might return a password or other credential .
30
33
*/
31
34
class SensitiveFunction extends Function {
32
35
SensitiveFunction ( ) {
@@ -36,7 +39,7 @@ class SensitiveFunction extends Function {
36
39
}
37
40
38
41
/**
39
- * An expression whose value might be a password or other sensitive information .
42
+ * An expression whose value might be a password or other credential .
40
43
*/
41
44
class SensitiveExpr extends Expr {
42
45
SensitiveExpr ( ) {
You can’t perform that action at this time.
0 commit comments