hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix SensitiveResultReceiver test case

Browse Source
This commit is contained in:
Ed Minnix
2023-04-10 16:08:41 -04:00
parent 3826b9be6c
commit 0fc775027f
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/semmle/code/java/security/SensitiveResultReceiverQuery.qll
View File

@@ -31,7 +31,7 @@ private predicate untrustedResultReceiverSend(DataFlow::Node src, ResultReceiver
UntrustedResultReceiverFlow::flow(src, DataFlow::exprNode(call.getReceiver()))
}
private module SensitiveResultReceiverConfig implements DataFlow::ConfigSig {
module SensitiveResultReceiverConfig implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node node) { node.asExpr() instanceof SensitiveExpr }
predicate isSink(DataFlow::Node node) {

4
java/ql/test/query-tests/security/CWE-927/SensitiveResultReceiver.ql
View File

@@ -14,8 +14,8 @@ class ResultReceiverTest extends InlineExpectationsTest {
override string getARelevantTag() { result = "hasSensitiveResultReceiver" }
override predicate hasActualResult(Location loc, string element, string tag, string value) {
exists(DataFlow::PathNode sink |
sensitiveResultReceiver(_, sink, _) and
exists(SensitiveResultReceiverFlow::PathNode sink |
isSensitiveResultReceiver(_, sink, _) and
element = sink.toString() and
loc = sink.getNode().getLocation() and
tag = "hasSensitiveResultReceiver" and