Skip to content

Commit 202b6d4

Browse files
committed
C++: Update SensitiveExprs.qll to clarify the relationship.
1 parent 0453c0f commit 202b6d4

File tree

1 file changed

+8
-5
lines changed

1 file changed

+8
-5
lines changed

cpp/ql/lib/semmle/code/cpp/security/SensitiveExprs.qll

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,16 @@
11
/**
22
* Provides classes for heuristically identifying variables and functions that
3-
* might contain or return a password or other sensitive information.
3+
* might contain or return a password or other credential.
4+
*
5+
* This library is not concerned with other kinds of sensitive private
6+
* information. See `PrivateData.qll` for expressions related to that.
47
*/
58

69
import cpp
710

811
/**
912
* Holds if the name `s` suggests something might contain or return a password
10-
* or other sensitive information.
13+
* or other credential.
1114
*/
1215
bindingset[s]
1316
private predicate suspicious(string s) {
@@ -16,7 +19,7 @@ private predicate suspicious(string s) {
1619
}
1720

1821
/**
19-
* A variable that might contain a password or other sensitive information.
22+
* A variable that might contain a password or other credential.
2023
*/
2124
class SensitiveVariable extends Variable {
2225
SensitiveVariable() {
@@ -26,7 +29,7 @@ class SensitiveVariable extends Variable {
2629
}
2730

2831
/**
29-
* A function that might return a password or other sensitive information.
32+
* A function that might return a password or other credential.
3033
*/
3134
class SensitiveFunction extends Function {
3235
SensitiveFunction() {
@@ -36,7 +39,7 @@ class SensitiveFunction extends Function {
3639
}
3740

3841
/**
39-
* An expression whose value might be a password or other sensitive information.
42+
* An expression whose value might be a password or other credential.
4043
*/
4144
class SensitiveExpr extends Expr {
4245
SensitiveExpr() {

0 commit comments

Comments
 (0)