hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add missing QLDocs

Browse Source
This commit is contained in:
Ed Minnix
2023-03-03 15:08:44 -05:00
parent 8ec5b5b7fa
commit 10cd6328dc
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
java/ql/src/Security/CWE/CWE-094/ArbitraryAPKInstallation.ql
View File

@@ -23,6 +23,7 @@ class PackageArchiveMimeTypeLiteral extends StringLiteral {
PackageArchiveMimeTypeLiteral() { this.getValue() = "application/vnd.android.package-archive" }
}
/** The `android.content.Intent.ACTION_INSTALL_PACKAGE` constant. */
class InstallPackageAction extends Expr {
InstallPackageAction() {
this.(StringLiteral).getValue() = "android.intent.action.INSTALL_PACKAGE"
@@ -110,6 +111,7 @@ class ApkConfiguration extends DataFlow::Configuration {
}
}
/** The `setAction` method of the `android.content.Intent` class. */
class SetActionMethod extends Method {
SetActionMethod() {
this.hasName("setAction") and
@@ -117,6 +119,12 @@ class SetActionMethod extends Method {
}
}
/**
* A dataflow configuration tracking the flow from the `android.content.Intent.ACTION_INSTALL_PACKAGE`
* constant to either the constructor of an intent or the `setAction` method of an intent.
*
* This is used to track if an intent is used to install an APK.
*/
private class InstallPackageActionConfiguration extends TaintTracking3::Configuration {
InstallPackageActionConfiguration() { this = "InstallPackageActionConfiguration" }