Update rust/ql/examples/snippets/simple_constant_password.ql

geoffw0 · hvitved · web-flow · commit 95987724773a · 2025-11-12T14:37:45.000Z
Co-authored-by: Tom Hvitved &lt;hvitved@github.com&gt;
diff --git a/rust/ql/examples/snippets/simple_constant_password.ql b/rust/ql/examples/snippets/simple_constant_password.ql
@@ -30,9 +30,10 @@ module ConstantPasswordConfig implements DataFlow::ConfigSig {
 
   predicate isSink(DataFlow::Node node) {
     // `node` is an argument whose corresponding parameter name matches the pattern "pass%"
-    exists(CallExpr call, Function target, int argIndex |
+    exists(CallExpr call, Function target, int argIndex, Variable v |
       call.getStaticTarget() = target and
-      target.getParam(argIndex).getPat().(IdentPat).getName().getText().matches("pass%") and
+      v.getParameter() = target.getParam(argIndex) and
+      v.getText().matches("pass%") and
       call.getArg(argIndex) = node.asExpr().getExpr()
     )
   }

Original file line number	Diff line number	Diff line change
`@@ -30,9 +30,10 @@ module ConstantPasswordConfig implements DataFlow::ConfigSig {`
`30`	`30`
`31`	`31`	`predicate isSink(DataFlow::Node node) {`
`32`	`32`	// `node` is an argument whose corresponding parameter name matches the pattern "pass%"
`33`		`- exists(CallExpr call, Function target, int argIndex \|`
	`33`	`+ exists(CallExpr call, Function target, int argIndex, Variable v \|`
`34`	`34`	`call.getStaticTarget() = target and`
`35`		`- target.getParam(argIndex).getPat().(IdentPat).getName().getText().matches("pass%") and`
	`35`	`+ v.getParameter() = target.getParam(argIndex) and`
	`36`	`+ v.getText().matches("pass%") and`
`36`	`37`	`call.getArg(argIndex) = node.asExpr().getExpr()`
`37`	`38`	`)`
`38`	`39`	`}`