hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 09:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Improve reflective class names

Browse Source
This commit is contained in:
Chris Smowton
2023-10-24 13:29:32 +01:00
committed by GitHub
parent 011666b48c
commit 06238dd5f6
6 changed files with 29 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/experimental/Security/CWE/CWE-470/UnsafeReflection.ql
View File

@@ -45,8 +45,8 @@ module UnsafeReflectionConfig implements DataFlow::ConfigSig {
// Qualifier -> return of Class.getDeclaredConstructors/Methods and similar
exists(MethodCall ma |
(
ma instanceof ReflectiveConstructorsCall or
ma instanceof ReflectiveMethodsCall
ma instanceof ReflectiveGetConstructorsCall or
ma instanceof ReflectiveGetMethodsCall
) and
ma.getQualifier() = pred.asExpr() and
ma = succ.asExpr()