hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added external storage test case

Browse Source
This commit is contained in:
Ed Minnix
2023-01-20 15:49:18 -05:00
parent c448481bf7
commit 01b20b3a26
2 changed files with 18 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
java/ql/test/query-tests/security/CWE-094/APKInstallation.expected
View File

@@ -1,12 +1,14 @@
edges
nodes
| APKInstallation.java:13:31:13:58 | fromFile(...) | semmle.label | fromFile(...) |
| APKInstallation.java:20:31:20:44 | parse(...) | semmle.label | parse(...) |
| APKInstallation.java:28:24:28:38 | parse(...) | semmle.label | parse(...) |
| APKInstallation.java:35:24:35:51 | fromFile(...) | semmle.label | fromFile(...) |
| APKInstallation.java:14:31:14:58 | fromFile(...) | semmle.label | fromFile(...) |
| APKInstallation.java:21:31:21:44 | parse(...) | semmle.label | parse(...) |
| APKInstallation.java:29:24:29:38 | parse(...) | semmle.label | parse(...) |
| APKInstallation.java:36:24:36:51 | fromFile(...) | semmle.label | fromFile(...) |
| APKInstallation.java:43:31:43:48 | fromFile(...) | semmle.label | fromFile(...) |
subpaths
#select
| APKInstallation.java:13:31:13:58 | fromFile(...) | APKInstallation.java:13:31:13:58 | fromFile(...) | APKInstallation.java:13:31:13:58 | fromFile(...) | Arbitrary Android APK installation. |
| APKInstallation.java:20:31:20:44 | parse(...) | APKInstallation.java:20:31:20:44 | parse(...) | APKInstallation.java:20:31:20:44 | parse(...) | Arbitrary Android APK installation. |
| APKInstallation.java:28:24:28:38 | parse(...) | APKInstallation.java:28:24:28:38 | parse(...) | APKInstallation.java:28:24:28:38 | parse(...) | Arbitrary Android APK installation. |
| APKInstallation.java:35:24:35:51 | fromFile(...) | APKInstallation.java:35:24:35:51 | fromFile(...) | APKInstallation.java:35:24:35:51 | fromFile(...) | Arbitrary Android APK installation. |
| APKInstallation.java:14:31:14:58 | fromFile(...) | APKInstallation.java:14:31:14:58 | fromFile(...) | APKInstallation.java:14:31:14:58 | fromFile(...) | Arbitrary Android APK installation. |
| APKInstallation.java:21:31:21:44 | parse(...) | APKInstallation.java:21:31:21:44 | parse(...) | APKInstallation.java:21:31:21:44 | parse(...) | Arbitrary Android APK installation. |
| APKInstallation.java:29:24:29:38 | parse(...) | APKInstallation.java:29:24:29:38 | parse(...) | APKInstallation.java:29:24:29:38 | parse(...) | Arbitrary Android APK installation. |
| APKInstallation.java:36:24:36:51 | fromFile(...) | APKInstallation.java:36:24:36:51 | fromFile(...) | APKInstallation.java:36:24:36:51 | fromFile(...) | Arbitrary Android APK installation. |
| APKInstallation.java:43:31:43:48 | fromFile(...) | APKInstallation.java:43:31:43:48 | fromFile(...) | APKInstallation.java:43:31:43:48 | fromFile(...) | Arbitrary Android APK installation. |

8
java/ql/test/query-tests/security/CWE-094/APKInstallation.java
View File

@@ -1,6 +1,7 @@
import android.app.Activity;
import android.content.Intent;
import android.net.Uri;
import android.os.Environment;
import java.io.File;
@@ -35,4 +36,11 @@ public class APKInstallation extends Activity {
intent.setData(Uri.fromFile(new File(path)));
startActivity(intent);
}
public void installAPK4(String path) {
File file = new File(Environment.getExternalStorageDirectory(), path);
Intent intent = new Intent(Intent.ACTION_VIEW);
intent.setDataAndType(Uri.fromFile(file), APK_MIMETYPE);
startActivity(intent);
}
}