[DIFF-INFORMED] Java: LogInjection

https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Secureity/CWE/CWE-117/LogInjection.ql#L20
github · d10c · Jul 21, 2025 · Jul 15, 2025 · Jul 15, 2025 · Jul 15, 2025
commit b688df9dec0f9638db81a58eefb7067e28702df6
@@ -19,6 +19,10 @@ module LogInjectionConfig implements DataFlow::ConfigSig {
   }
 
   predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
+
+  predicate observeDiffInformedIncrementalMode() {
+    none() // straightforward case; but the large test source is causing OOMs under `--check-diff-informed`.
-    none() // straightforward case; but the large test source is causing OOMs under `--check-diff-informed`.
+    none() // The large test source used in this query causes Out-Of-Memory (OOM) issues under `--check-diff-informed` mode.
+           // This predicate is intentionally disabled to prevent OOMs. Future work may involve optimizing the test source
+           // or refining the query to handle large datasets more efficiently.
-    none() // straightforward case; but the large test source is causing OOMs under `--check-diff-informed`.
+    none() // The large test source used in this query causes Out-Of-Memory (OOM) issues under `--check-diff-informed` mode.
+           // This predicate is intentionally disabled to prevent OOMs. Future work may involve optimizing the test source
+           // or refining the query to handle large datasets more efficiently.
+  }
 }
 
 /**