Merge pull request #10971 from joefarebrother/android-certificate-pinning

Java: Add Android missing certificate pinning query (CWE-295)

java/ql/lib/semmle/code/java/security/AndroidCertificatePinningQuery.qll

@@ -0,0 +1,140 @@
+/** Definitions for the Android Missing Certificate Pinning query. */
+
+import java
+import semmle.code.xml.AndroidManifest
+import semmle.code.java.dataflow.TaintTracking
+import semmle.code.java.frameworks.Networking
+import semmle.code.java.security.Encryption
+import semmle.code.java.security.HttpsUrls
+
+/** An Android Network Security Configuration XML file. */
+class AndroidNetworkSecurityConfigFile extends XmlFile {
+  AndroidNetworkSecurityConfigFile() {
+    exists(AndroidApplicationXmlElement app, AndroidXmlAttribute confAttr, string confName |
+      confAttr.getElement() = app and
+      confAttr.getValue() = "@xml/" + confName and
+      this.getRelativePath().matches("%res/xml/" + confName + ".xml") and
+      this.getARootElement().getName() = "network-security-config"
+    )
+  }
+}
+
+/** Holds if this database is of an Android application. */
+predicate isAndroid() { exists(AndroidManifestXmlFile m) }
+
+/** Holds if the given domain name is trusted by the Network Security Configuration XML file. */
+private predicate trustedDomainViaXml(string domainName) {
+  exists(
+    AndroidNetworkSecurityConfigFile confFile, XmlElement domConf, XmlElement domain,
+    XmlElement trust
+  |
+    domConf.getFile() = confFile and
+    domConf.getName() = "domain-config" and
+    domain.getParent() = domConf and
+    domain.getName() = "domain" and
+    domain.getACharactersSet().getCharacters() = domainName and
+    trust.getParent() = domConf and
+    trust.getName() = ["trust-anchors", "pin-set"]
+  )
+}
+
+/** Holds if the given domain name is trusted by an OkHttp `CertificatePinner`. */
+private predicate trustedDomainViaOkHttp(string domainName) {
+  exists(CompileTimeConstantExpr domainExpr, MethodAccess certPinnerAdd |
+    domainExpr.getStringValue().replaceAll("*.", "") = domainName and // strip wildcard patterns like *.example.com
+    certPinnerAdd.getMethod().hasQualifiedName("okhttp3", "CertificatePinner$Builder", "add") and
+    DataFlow::localExprFlow(domainExpr, certPinnerAdd.getArgument(0))
+  )
+}
+
+/** Holds if the given domain name is trusted by some certificate pinning implementation. */
+predicate trustedDomain(string domainName) {
+  trustedDomainViaXml(domainName)
+  or
+  trustedDomainViaOkHttp(domainName)
+}
+
+/**
+ * Holds if `setSocketFactory` is a call to `HttpsURLConnection.setSSLSocketFactory` or `HttpsURLConnection.setDefaultSSLSocketFactory`
+ * that uses a socket factory derived from a `TrustManager`.
+ * `default` is true if the default SSL socket factory for all URLs is being set.
+ */
+private predicate trustedSocketFactory(MethodAccess setSocketFactory, boolean default) {
+  exists(MethodAccess getSocketFactory, MethodAccess initSslContext |
+    exists(Method m | setSocketFactory.getMethod() = m |
+      default = true and m instanceof SetDefaultConnectionFactoryMethod
+      or
+      default = false and m instanceof SetConnectionFactoryMethod
+    ) and
+    initSslContext.getMethod().getDeclaringType() instanceof SslContext and
+    initSslContext.getMethod().hasName("init") and
+    getSocketFactory.getMethod().getASourceOverriddenMethod*() instanceof GetSocketFactory and
+    not initSslContext.getArgument(1) instanceof NullLiteral and
+    DataFlow::localExprFlow(initSslContext.getQualifier(), getSocketFactory.getQualifier()) and
+    DataFlow::localExprFlow(getSocketFactory, setSocketFactory.getArgument(0))
+  )
+}
+
+/**
+ * Holds if the given expression is an qualifier to a `URL.openConnection` or `URL.openStream` call
+ * that is trusted due to its SSL socket factory being set.
+ */
+private predicate trustedUrlConnection(Expr url) {
+  exists(MethodAccess openCon |
+    openCon.getMethod().getASourceOverriddenMethod*() instanceof UrlOpenConnectionMethod and
+    url = openCon.getQualifier() and
+    exists(MethodAccess setSocketFactory |
+      trustedSocketFactory(setSocketFactory, false) and
+      TaintTracking::localExprTaint(openCon, setSocketFactory.getQualifier())
+    )
+  )
+  or
+  trustedSocketFactory(_, true) and
+  exists(MethodAccess open, Method m |
+    m instanceof UrlOpenConnectionMethod or m instanceof UrlOpenStreamMethod
+  |
+    open.getMethod().getASourceOverriddenMethod*() = m and
+    url = open.getQualifier()
+  )
+}
+
+private class MissingPinningSink extends DataFlow::Node {
+  MissingPinningSink() {
+    this instanceof UrlOpenSink and
+    not trustedUrlConnection(this.asExpr())
+  }
+}
+
+/** Configuration for finding uses of non trusted URLs. */
+private class UntrustedUrlConfig extends TaintTracking::Configuration {
+  UntrustedUrlConfig() { this = "UntrustedUrlConfig" }
+
+  override predicate isSource(DataFlow::Node node) {
+    trustedDomain(_) and
+    exists(string lit | lit = node.asExpr().(CompileTimeConstantExpr).getStringValue() |
+      lit.matches("%://%") and // it's a URL
+      not exists(string dom | trustedDomain(dom) and lit.matches("%" + dom + "%"))
+    )
+  }
+
+  override predicate isSink(DataFlow::Node node) { node instanceof MissingPinningSink }
+}
+
+/** Holds if `node` is a network communication call for which certificate pinning is not implemented. */
+predicate missingPinning(DataFlow::Node node, string domain) {
+  isAndroid() and
+  node instanceof MissingPinningSink and
+  (
+    not trustedDomain(_) and domain = ""
+    or
+    exists(UntrustedUrlConfig conf, DataFlow::Node src |
+      conf.hasFlow(src, node) and
+      domain = getDomain(src.asExpr())
+    )
+  )
+}
+
+/** Gets the domain name from the given string literal */
+private string getDomain(CompileTimeConstantExpr expr) {
+  result = expr.getStringValue().regexpCapture("(https?://)?([^/]*)(/.*)?", 2)
+}

java/ql/lib/semmle/code/java/security/Encryption.qll

@@ -143,6 +143,7 @@ class CreateSslEngineMethod extends Method {
   }
 }
 
+/** The `setConnectionFactory` method of the class `javax.net.ssl.HttpsURLConnection`. */
 class SetConnectionFactoryMethod extends Method {
   SetConnectionFactoryMethod() {
     this.hasName("setSSLSocketFactory") and
@@ -150,6 +151,14 @@ class SetConnectionFactoryMethod extends Method {
   }
 }
 
+/** The `setDefaultConnectionFactory` method of the class `javax.net.ssl.HttpsURLConnection`. */
+class SetDefaultConnectionFactoryMethod extends Method {
+  SetDefaultConnectionFactoryMethod() {
+    this.hasName("setDefaultSSLSocketFactory") and
+    this.getDeclaringType().getAnAncestor() instanceof HttpsUrlConnection
+  }
+}
+
 class SetHostnameVerifierMethod extends Method {
   SetHostnameVerifierMethod() {
     this.hasName("setHostnameVerifier") and

java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.qhelp

@@ -0,0 +1,48 @@
+<!DOCTYPE qhelp PUBLIC
+  "-//Semmle//qhelp//EN"
+  "qhelp.dtd">
+<qhelp>
+<overview>
+<p>
+Certificate pinning is the practice of only trusting a specific set of SSL certificates, rather than those that the device trusts by default.
+In Android applications, it is reccomended to use certificate pinning when communicating over the network, 
+in order to minimize the risk of machine-in-the-middle attacks from a compromised CA.
+</p>
+</overview>
+
+<recommendation>
+<p>
+The easiest way to implement certificate pinning is to declare your pins in a <code>network-security-config</code> XML file. 
+This will automatically provide certificate pinning for any network connection made by the app.
+</p>
+<p>
+Another way to implement certificate pinning is to use the `CertificatePinner` class from the `okhttp` library. 
+</p>
+<p>
+A final way to implement certificate pinning is to use a <code>TrustManager</code>, initialized from a <code>KeyStore</code> loaded with only the necessary certificates.
+</p>
+
+</recommendation>
+
+<example>
+<p>
+In the first (bad) case below, a network call is performed with no certificate pinning implemented. 
+The other (good) cases demonstrate the different ways to implement certificate pinning. 
+</p>
+<sample src="AndroidMissingCertificatePinning1.java" />
+<sample src="AndroidMissingCertificatePinning2.xml" />
+<sample src="AndroidMissingCertificatePinning3.java" />
+</example>
+
+<references>
+  <li>
+    OWASP Mobile Security: <a href="https://mobile-security.gitbook.io/mobile-security-testing-guide/android-testing-guide/0x05g-testing-network-communication#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4">Testing Custom Certificate Stores and Certificate Pinning (MSTG-NETWORK-4)</a>.
+  </li>
+  <li>
+    Android Developers: <a href="https://developer.android.com/training/articles/security-config">Network security configuration</a>.
+  </li>
+  <li>
+    OkHttp: <a href="https://square.github.io/okhttp/4.x/okhttp/okhttp3/-certificate-pinner/">CertificatePinner</a>.
+  </li>
+</references>
+</qhelp>

java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql

@@ -0,0 +1,22 @@
+/**
+ * @name Android missing certificate pinning
+ * @description Network connections that do not use certificate pinning may allow attackers to eavesdrop on communications.
+ * @kind problem
+ * @problem.severity warning
+ * @security-severity 5.9
+ * @precision medium
+ * @id java/android/missing-certificate-pinning
+ * @tags security
+ *       external/cwe/cwe-295
+ */
+
+import java
+import semmle.code.java.security.AndroidCertificatePinningQuery
+
+from DataFlow::Node node, string domain, string msg
+where
+  missingPinning(node, domain) and
+  if domain = ""
+  then msg = "(no explicitly trusted domains)"
+  else msg = "(" + domain + " is not trusted by a pin)"
+select node, "This network call does not implement certificate pinning. " + msg

java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning1.java

@@ -0,0 +1,2 @@
+// BAD - By default, this network call does not use certificate pinning
+URLConnection conn = new URL("https://example.com").openConnection();

java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning2.xml

@@ -0,0 +1,21 @@
+<!-- GOOD: Certificate pinning implemented via a Network Security Config file -->
+
+<!-- In AndroidManifest.xml -->
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.example.app">
+
+    <application android:networkSecurityConfig="@xml/NetworkSecurityConfig">
+        ...
+    </application>
+
+</manifest>
+
+<!-- In res/xml/NetworkSecurityConfig.xml -->
+<network-security-config>
+    <domain-config>
+        <domain>good.example.com</domain>
+        <pin-set expiration="2038/1/19">
+            <pin digest="SHA-256">...</pin>
+        </pin-set>
+    </domain-config>
+</network-security-config>

java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning3.java

@@ -0,0 +1,26 @@
+// GOOD: Certificate pinning implemented via okhttp3.CertificatePinner 
+CertificatePinner certificatePinner = new CertificatePinner.Builder()
+    .add("example.com", "sha256/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=")
+    .build();
+OkHttpClient client = new OkHttpClient.Builder()
+    .certificatePinner(certificatePinner)
+    .build();
+
+client.newCall(new Request.Builder().url("https://example.com").build()).execute();
+
+
+
+// GOOD: Certificate pinning implemented via a TrustManager
+KeyStore keyStore = KeyStore.getInstance("BKS");
+keyStore.load(resources.openRawResource(R.raw.cert), null);
+
+TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
+tmf.init(keyStore);
+
+SSLContext sslContext = SSLContext.getInstance("TLS");
+sslContext.init(null, tmf.getTrustManagers(), null);
+
+URL url = new URL("http://www.example.com/");
+HttpsURLConnection urlConnection = (HttpsURLConnection) url.openConnection(); 
+
+urlConnection.setSSLSocketFactory(sslContext.getSocketFactory());

java/ql/src/change-notes/2022-11-30-android-certificate-pinning.md

@@ -0,0 +1,4 @@
+---
+category: newQuery
+---
+* Added a new query, `java/android/missing-certificate-pinning`, to find network calls where certificate pinning is not implemented.

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test1/AndroidManifest.xml

@@ -0,0 +1,10 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.example.app"
+    android:installLocation="auto"
+    android:versionCode="1"
+    android:versionName="0.1" >
+
+    <application android:networkSecurityConfig="@xml/NetworkSecurityConfig">
+    </application>
+
+</manifest>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test1/Test.java

@@ -0,0 +1,12 @@
+import java.net.URL;
+import java.net.URLConnection;
+
+class Test{
+    URLConnection test1() throws Exception {
+        return new URL("https://good.example.com").openConnection();
+    }
+
+    URLConnection test2() throws Exception {
+        return new URL("https://bad.example.com").openConnection(); // $hasUntrustedResult
+    }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test1/options

@@ -0,0 +1 @@
+// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test1/res/xml/NetworkSecurityConfig.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <domain-config>
+        <domain>good.example.com</domain>
+        <pin-set expiration="2038/1/19">
+            <pin digest="SHA-256">...</pin>
+        </pin-set>
+    </domain-config>
+</network-security-config>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test1/test.ql

@@ -0,0 +1,19 @@
+import java
+import TestUtilities.InlineExpectationsTest
+import semmle.code.java.security.AndroidCertificatePinningQuery
+
+class Test extends InlineExpectationsTest {
+  Test() { this = "AndroidMissingCertificatePinningTest" }
+
+  override string getARelevantTag() { result = ["hasNoTrustedResult", "hasUntrustedResult"] }
+
+  override predicate hasActualResult(Location loc, string el, string tag, string value) {
+    exists(DataFlow::Node node |
+      missingPinning(node, _) and
+      loc = node.getLocation() and
+      el = node.toString() and
+      value = "" and
+      if trustedDomain(_) then tag = "hasUntrustedResult" else tag = "hasNoTrustedResult"
+    )
+  }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test2/AndroidManifest.xml

@@ -0,0 +1,10 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.example.app"
+    android:installLocation="auto"
+    android:versionCode="1"
+    android:versionName="0.1" >
+
+    <application android:networkSecurityConfig="@xml/NetworkSecurityConfig">
+    </application>
+
+</manifest>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test2/Test.java

@@ -0,0 +1,8 @@
+import java.net.URL;
+import java.net.URLConnection;
+
+class Test{
+    URLConnection test2() throws Exception {
+        return new URL("https://example.com").openConnection(); // $hasNoTrustedResult
+    }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test2/options

@@ -0,0 +1 @@
+// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test2/res/xml/NetworkSecurityConfig.xml

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+
+</network-security-config>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test2/test.ql

@@ -0,0 +1,23 @@
+import java
+import TestUtilities.InlineExpectationsTest
+import semmle.code.java.security.AndroidCertificatePinningQuery
+
+class Test extends InlineExpectationsTest {
+  Test() { this = "AndroidMissingCertificatePinningTest" }
+
+  override string getARelevantTag() { result = ["hasNoTrustedResult", "hasUntrustedResult"] }
+
+  override predicate hasActualResult(Location loc, string el, string tag, string value) {
+    exists(DataFlow::Node node |
+      missingPinning(node, _) and
+      loc = node.getLocation() and
+      el = node.toString() and
+      value = "" and
+      (
+        if exists(string x | trustedDomain(x))
+        then tag = "hasUntrustedResult"
+        else tag = "hasNoTrustedResult"
+      )
+    )
+  }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test3/AndroidManifest.xml

@@ -0,0 +1,10 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.example.app"
+    android:installLocation="auto"
+    android:versionCode="1"
+    android:versionName="0.1" >
+
+    <application android:networkSecurityConfig="@xml/NetworkSecurityConfig">
+    </application>
+
+</manifest>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test3/Test.java

@@ -0,0 +1,17 @@
+import okhttp3.OkHttpClient;
+import okhttp3.CertificatePinner;
+import okhttp3.Request;
+
+class Test{
+    void test1() throws Exception {
+    CertificatePinner certificatePinner = new CertificatePinner.Builder()
+         .add("good.example.com", "sha256/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=")
+         .build();
+     OkHttpClient client = new OkHttpClient.Builder()
+         .certificatePinner(certificatePinner)
+         .build();
+
+     client.newCall(new Request.Builder().url("https://good.example.com").build()).execute();
+     client.newCall(new Request.Builder().url("https://bad.example.com").build()).execute(); // $hasUntrustedResult
+    }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test3/options

@@ -0,0 +1 @@
+// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0:${testdir}/../../../../../stubs/okhttp-4.9.3

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test3/res/xml/NetworkSecurityConfig.xml

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+
+</network-security-config>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test3/test.ql

@@ -0,0 +1,23 @@
+import java
+import TestUtilities.InlineExpectationsTest
+import semmle.code.java.security.AndroidCertificatePinningQuery
+
+class Test extends InlineExpectationsTest {
+  Test() { this = "AndroidMissingCertificatePinningTest" }
+
+  override string getARelevantTag() { result = ["hasNoTrustedResult", "hasUntrustedResult"] }
+
+  override predicate hasActualResult(Location loc, string el, string tag, string value) {
+    exists(DataFlow::Node node |
+      missingPinning(node, _) and
+      loc = node.getLocation() and
+      el = node.toString() and
+      value = "" and
+      (
+        if exists(string x | trustedDomain(x))
+        then tag = "hasUntrustedResult"
+        else tag = "hasNoTrustedResult"
+      )
+    )
+  }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test4/AndroidManifest.xml

@@ -0,0 +1,10 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.example.app"
+    android:installLocation="auto"
+    android:versionCode="1"
+    android:versionName="0.1" >
+
+    <application android:networkSecurityConfig="@xml/NetworkSecurityConfig">
+    </application>
+
+</manifest>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test4/R.java

@@ -0,0 +1,7 @@
+package com.example;
+
+class R {
+    static final class raw {
+        static final int cert = 0;
+    }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test4/Test.java

@@ -0,0 +1,32 @@
+package com.example;
+
+import java.net.URL;
+import java.net.URLConnection;
+import java.security.KeyStore;
+import javax.net.ssl.TrustManagerFactory;
+import javax.net.ssl.HttpsURLConnection;
+import javax.net.ssl.SSLContext;
+import android.content.res.Resources;
+
+class Test{
+    void test1(Resources resources) throws Exception {
+        KeyStore keyStore = KeyStore.getInstance("BKS");
+        keyStore.load(resources.openRawResource(R.raw.cert), null);
+
+        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
+        tmf.init(keyStore);
+
+        SSLContext sslContext = SSLContext.getInstance("TLS");
+        sslContext.init(null, tmf.getTrustManagers(), null);
+
+        URL url = new URL("http://www.example.com/");
+        HttpsURLConnection urlConnection = (HttpsURLConnection) url.openConnection(); 
+
+        urlConnection.setSSLSocketFactory(sslContext.getSocketFactory());
+    }
+
+    void test2() throws Exception {
+        URL url = new URL("http://www.example.com/");
+        HttpsURLConnection urlConnection = (HttpsURLConnection) url.openConnection(); // $hasNoTrustedResult
+    }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test4/options

@@ -0,0 +1 @@
+// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test4/res/xml/NetworkSecurityConfig.xml

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+
+</network-security-config>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test4/test.ql

@@ -0,0 +1,23 @@
+import java
+import TestUtilities.InlineExpectationsTest
+import semmle.code.java.security.AndroidCertificatePinningQuery
+
+class Test extends InlineExpectationsTest {
+  Test() { this = "AndroidMissingCertificatePinningTest" }
+
+  override string getARelevantTag() { result = ["hasNoTrustedResult", "hasUntrustedResult"] }
+
+  override predicate hasActualResult(Location loc, string el, string tag, string value) {
+    exists(DataFlow::Node node |
+      missingPinning(node, _) and
+      loc = node.getLocation() and
+      el = node.toString() and
+      value = "" and
+      (
+        if exists(string x | trustedDomain(x))
+        then tag = "hasUntrustedResult"
+        else tag = "hasNoTrustedResult"
+      )
+    )
+  }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test5/AndroidManifest.xml

@@ -0,0 +1,10 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.example.app"
+    android:installLocation="auto"
+    android:versionCode="1"
+    android:versionName="0.1" >
+
+    <application android:networkSecurityConfig="@xml/NetworkSecurityConfig">
+    </application>
+
+</manifest>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test5/R.java

@@ -0,0 +1,7 @@
+package com.example;
+
+class R {
+    static final class raw {
+        static final int cert = 0;
+    }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test5/Test.java

@@ -0,0 +1,35 @@
+package com.example;
+
+import java.net.URL;
+import java.net.URLConnection;
+import java.io.InputStream;
+import java.security.KeyStore;
+import javax.net.ssl.TrustManagerFactory;
+import javax.net.ssl.HttpsURLConnection;
+import javax.net.ssl.SSLContext;
+import android.content.res.Resources;
+
+class Test{
+    void init(Resources resources) throws Exception {
+        KeyStore keyStore = KeyStore.getInstance("BKS");
+        keyStore.load(resources.openRawResource(R.raw.cert), null);
+
+        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
+        tmf.init(keyStore);
+
+        SSLContext sslContext = SSLContext.getInstance("TLS");
+        sslContext.init(null, tmf.getTrustManagers(), null);
+
+        HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());
+    }
+
+    URLConnection test1() throws Exception {
+        URL url = new URL("http://www.example.com/");
+        return url.openConnection(); 
+    }
+
+    InputStream test2() throws Exception {
+        URL url = new URL("http://www.example.com/");
+        return url.openStream(); 
+    }
+}

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test5/options

@@ -0,0 +1 @@
+// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test5/res/xml/NetworkSecurityConfig.xml

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+
+</network-security-config>

java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test5/test.ql

@@ -0,0 +1,23 @@
+import java
+import TestUtilities.InlineExpectationsTest
+import semmle.code.java.security.AndroidCertificatePinningQuery
+
+class Test extends InlineExpectationsTest {
+  Test() { this = "AndroidMissingCertificatePinningTest" }
+
+  override string getARelevantTag() { result = ["hasNoTrustedResult", "hasUntrustedResult"] }
+
+  override predicate hasActualResult(Location loc, string el, string tag, string value) {
+    exists(DataFlow::Node node |
+      missingPinning(node, _) and
+      loc = node.getLocation() and
+      el = node.toString() and
+      value = "" and
+      (
+        if exists(string x | trustedDomain(x))
+        then tag = "hasUntrustedResult"
+        else tag = "hasNoTrustedResult"
+      )
+    )
+  }
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/SocketFactory.java

@@ -0,0 +1,17 @@
+// Generated automatically from javax.net.SocketFactory for testing purposes
+
+package javax.net;
+
+import java.net.InetAddress;
+import java.net.Socket;
+
+abstract public class SocketFactory
+{
+    protected SocketFactory(){}
+    public Socket createSocket(){ return null; }
+    public abstract Socket createSocket(InetAddress p0, int p1);
+    public abstract Socket createSocket(InetAddress p0, int p1, InetAddress p2, int p3);
+    public abstract Socket createSocket(String p0, int p1);
+    public abstract Socket createSocket(String p0, int p1, InetAddress p2, int p3);
+    public static SocketFactory getDefault(){ return null; }
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/HandshakeCompletedEvent.java

@@ -0,0 +1,24 @@
+// Generated automatically from javax.net.ssl.HandshakeCompletedEvent for testing purposes
+
+package javax.net.ssl;
+
+import java.security.Principal;
+import java.security.cert.Certificate;
+import java.util.EventObject;
+import javax.net.ssl.SSLSession;
+import javax.net.ssl.SSLSocket;
+import javax.security.cert.X509Certificate;
+
+public class HandshakeCompletedEvent extends EventObject
+{
+    protected HandshakeCompletedEvent() { super(null); } // manually corrected
+    public Certificate[] getLocalCertificates(){ return null; }
+    public Certificate[] getPeerCertificates(){ return null; }
+    public HandshakeCompletedEvent(SSLSocket p0, SSLSession p1){ super(null); } // manually corrected
+    public Principal getLocalPrincipal(){ return null; }
+    public Principal getPeerPrincipal(){ return null; }
+    public SSLSession getSession(){ return null; }
+    public SSLSocket getSocket(){ return null; }
+    public String getCipherSuite(){ return null; }
+    public X509Certificate[] getPeerCertificateChain(){ return null; }
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/HandshakeCompletedListener.java

@@ -0,0 +1,11 @@
+// Generated automatically from javax.net.ssl.HandshakeCompletedListener for testing purposes
+
+package javax.net.ssl;
+
+import java.util.EventListener;
+import javax.net.ssl.HandshakeCompletedEvent;
+
+public interface HandshakeCompletedListener extends EventListener
+{
+    void handshakeCompleted(HandshakeCompletedEvent p0);
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/HostnameVerifier.java

@@ -0,0 +1,10 @@
+// Generated automatically from javax.net.ssl.HostnameVerifier for testing purposes
+
+package javax.net.ssl;
+
+import javax.net.ssl.SSLSession;
+
+public interface HostnameVerifier
+{
+    boolean verify(String p0, SSLSession p1);
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/SNIMatcher.java

@@ -0,0 +1,13 @@
+// Generated automatically from javax.net.ssl.SNIMatcher for testing purposes
+
+package javax.net.ssl;
+
+import javax.net.ssl.SNIServerName;
+
+abstract public class SNIMatcher
+{
+    protected SNIMatcher() {}
+    protected SNIMatcher(int p0){}
+    public abstract boolean matches(SNIServerName p0);
+    public final int getType(){ return 0; }
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/SNIServerName.java

@@ -0,0 +1,15 @@
+// Generated automatically from javax.net.ssl.SNIServerName for testing purposes
+
+package javax.net.ssl;
+
+
+abstract public class SNIServerName
+{
+    protected SNIServerName() {}
+    protected SNIServerName(int p0, byte[] p1){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final byte[] getEncoded(){ return null; }
+    public final int getType(){ return 0; }
+    public int hashCode(){ return 0; }
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/SSLParameters.java

@@ -0,0 +1,36 @@
+// Generated automatically from javax.net.ssl.SSLParameters for testing purposes
+
+package javax.net.ssl;
+
+import java.security.AlgorithmConstraints;
+import java.util.Collection;
+import java.util.List;
+import javax.net.ssl.SNIMatcher;
+import javax.net.ssl.SNIServerName;
+
+public class SSLParameters
+{
+    public AlgorithmConstraints getAlgorithmConstraints(){ return null; }
+    public SSLParameters(){}
+    public SSLParameters(String[] p0){}
+    public SSLParameters(String[] p0, String[] p1){}
+    public String getEndpointIdentificationAlgorithm(){ return null; }
+    public String[] getApplicationProtocols(){ return null; }
+    public String[] getCipherSuites(){ return null; }
+    public String[] getProtocols(){ return null; }
+    public boolean getNeedClientAuth(){ return false; }
+    public boolean getWantClientAuth(){ return false; }
+    public final Collection<SNIMatcher> getSNIMatchers(){ return null; }
+    public final List<SNIServerName> getServerNames(){ return null; }
+    public final boolean getUseCipherSuitesOrder(){ return false; }
+    public final void setSNIMatchers(Collection<SNIMatcher> p0){}
+    public final void setServerNames(List<SNIServerName> p0){}
+    public final void setUseCipherSuitesOrder(boolean p0){}
+    public void setAlgorithmConstraints(AlgorithmConstraints p0){}
+    public void setApplicationProtocols(String[] p0){}
+    public void setCipherSuites(String[] p0){}
+    public void setEndpointIdentificationAlgorithm(String p0){}
+    public void setNeedClientAuth(boolean p0){}
+    public void setProtocols(String[] p0){}
+    public void setWantClientAuth(boolean p0){}
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/SSLSession.java

@@ -0,0 +1,33 @@
+// Generated automatically from javax.net.ssl.SSLSession for testing purposes
+
+package javax.net.ssl;
+
+import java.security.Principal;
+import java.security.cert.Certificate;
+import javax.net.ssl.SSLSessionContext;
+import javax.security.cert.X509Certificate;
+
+public interface SSLSession
+{
+    Certificate[] getLocalCertificates();
+    Certificate[] getPeerCertificates();
+    Object getValue(String p0);
+    Principal getLocalPrincipal();
+    Principal getPeerPrincipal();
+    SSLSessionContext getSessionContext();
+    String getCipherSuite();
+    String getPeerHost();
+    String getProtocol();
+    String[] getValueNames();
+    X509Certificate[] getPeerCertificateChain();
+    boolean isValid();
+    byte[] getId();
+    int getApplicationBufferSize();
+    int getPacketBufferSize();
+    int getPeerPort();
+    long getCreationTime();
+    long getLastAccessedTime();
+    void invalidate();
+    void putValue(String p0, Object p1);
+    void removeValue(String p0);
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/SSLSessionContext.java

@@ -0,0 +1,16 @@
+// Generated automatically from javax.net.ssl.SSLSessionContext for testing purposes
+
+package javax.net.ssl;
+
+import java.util.Enumeration;
+import javax.net.ssl.SSLSession;
+
+public interface SSLSessionContext
+{
+    Enumeration<byte[]> getIds();
+    SSLSession getSession(byte[] p0);
+    int getSessionCacheSize();
+    int getSessionTimeout();
+    void setSessionCacheSize(int p0);
+    void setSessionTimeout(int p0);
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/SSLSocket.java

@@ -0,0 +1,45 @@
+// Generated automatically from javax.net.ssl.SSLSocket for testing purposes
+
+package javax.net.ssl;
+
+import java.net.InetAddress;
+import java.net.Socket;
+import java.util.List;
+import java.util.function.BiFunction;
+import javax.net.ssl.HandshakeCompletedListener;
+import javax.net.ssl.SSLParameters;
+import javax.net.ssl.SSLSession;
+
+abstract public class SSLSocket extends Socket
+{
+    protected SSLSocket(){}
+    protected SSLSocket(InetAddress p0, int p1){}
+    protected SSLSocket(InetAddress p0, int p1, InetAddress p2, int p3){}
+    protected SSLSocket(String p0, int p1){}
+    protected SSLSocket(String p0, int p1, InetAddress p2, int p3){}
+    public BiFunction<SSLSocket, List<String>, String> getHandshakeApplicationProtocolSelector(){ return null; }
+    public SSLParameters getSSLParameters(){ return null; }
+    public SSLSession getHandshakeSession(){ return null; }
+    public String getApplicationProtocol(){ return null; }
+    public String getHandshakeApplicationProtocol(){ return null; }
+    public abstract SSLSession getSession();
+    public abstract String[] getEnabledCipherSuites();
+    public abstract String[] getEnabledProtocols();
+    public abstract String[] getSupportedCipherSuites();
+    public abstract String[] getSupportedProtocols();
+    public abstract boolean getEnableSessionCreation();
+    public abstract boolean getNeedClientAuth();
+    public abstract boolean getUseClientMode();
+    public abstract boolean getWantClientAuth();
+    public abstract void addHandshakeCompletedListener(HandshakeCompletedListener p0);
+    public abstract void removeHandshakeCompletedListener(HandshakeCompletedListener p0);
+    public abstract void setEnableSessionCreation(boolean p0);
+    public abstract void setEnabledCipherSuites(String[] p0);
+    public abstract void setEnabledProtocols(String[] p0);
+    public abstract void setNeedClientAuth(boolean p0);
+    public abstract void setUseClientMode(boolean p0);
+    public abstract void setWantClientAuth(boolean p0);
+    public abstract void startHandshake();
+    public void setHandshakeApplicationProtocolSelector(BiFunction<SSLSocket, List<String>, String> p0){}
+    public void setSSLParameters(SSLParameters p0){}
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/SSLSocketFactory.java

@@ -0,0 +1,17 @@
+// Generated automatically from javax.net.ssl.SSLSocketFactory for testing purposes
+
+package javax.net.ssl;
+
+import java.io.InputStream;
+import java.net.Socket;
+import javax.net.SocketFactory;
+
+abstract public class SSLSocketFactory extends SocketFactory
+{
+    public SSLSocketFactory(){}
+    public Socket createSocket(Socket p0, InputStream p1, boolean p2){ return null; }
+    public abstract Socket createSocket(Socket p0, String p1, int p2, boolean p3);
+    public abstract String[] getDefaultCipherSuites();
+    public abstract String[] getSupportedCipherSuites();
+    public static SocketFactory getDefault(){ return null; }
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/TrustManager.java

@@ -0,0 +1,8 @@
+// Generated automatically from javax.net.ssl.TrustManager for testing purposes
+
+package javax.net.ssl;
+
+
+public interface TrustManager
+{
+}

java/ql/test/stubs/okhttp-4.9.3/javax/net/ssl/X509TrustManager.java

@@ -0,0 +1,13 @@
+// Generated automatically from javax.net.ssl.X509TrustManager for testing purposes
+
+package javax.net.ssl;
+
+import java.security.cert.X509Certificate;
+import javax.net.ssl.TrustManager;
+
+public interface X509TrustManager extends TrustManager
+{
+    X509Certificate[] getAcceptedIssuers();
+    void checkClientTrusted(X509Certificate[] p0, String p1);
+    void checkServerTrusted(X509Certificate[] p0, String p1);
+}

java/ql/test/stubs/okhttp-4.9.3/javax/security/cert/Certificate.java

@@ -0,0 +1,17 @@
+// Generated automatically from javax.security.cert.Certificate for testing purposes
+
+package javax.security.cert;
+
+import java.security.PublicKey;
+
+abstract public class Certificate
+{
+    public Certificate(){}
+    public abstract PublicKey getPublicKey();
+    public abstract String toString();
+    public abstract byte[] getEncoded();
+    public abstract void verify(PublicKey p0);
+    public abstract void verify(PublicKey p0, String p1);
+    public boolean equals(Object p0){ return false; }
+    public int hashCode(){ return 0; }
+}

java/ql/test/stubs/okhttp-4.9.3/javax/security/cert/X509Certificate.java

@@ -0,0 +1,27 @@
+// Generated automatically from javax.security.cert.X509Certificate for testing purposes
+
+package javax.security.cert;
+
+import java.io.InputStream;
+import java.math.BigInteger;
+import java.security.Principal;
+import java.util.Date;
+import javax.security.cert.Certificate;
+
+abstract public class X509Certificate extends Certificate
+{
+    public X509Certificate(){}
+    public abstract BigInteger getSerialNumber();
+    public abstract Date getNotAfter();
+    public abstract Date getNotBefore();
+    public abstract Principal getIssuerDN();
+    public abstract Principal getSubjectDN();
+    public abstract String getSigAlgName();
+    public abstract String getSigAlgOID();
+    public abstract byte[] getSigAlgParams();
+    public abstract int getVersion();
+    public abstract void checkValidity();
+    public abstract void checkValidity(Date p0);
+    public static X509Certificate getInstance(InputStream p0){ return null; }
+    public static X509Certificate getInstance(byte[] p0){ return null; }
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/collections/IntIterator.java

@@ -0,0 +1,14 @@
+// Generated automatically from kotlin.collections.IntIterator for testing purposes
+
+package kotlin.collections;
+
+import java.util.Iterator;
+import kotlin.jvm.internal.markers.KMappedMarker;
+
+abstract public class IntIterator implements Iterator<Integer>, KMappedMarker
+{
+    public IntIterator(){}
+    public abstract int nextInt();
+    public final Integer next(){ return null; }
+    public void remove(){}
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/jvm/functions/Function1.java

@@ -0,0 +1,10 @@
+// Generated automatically from kotlin.jvm.functions.Function1 for testing purposes
+
+package kotlin.jvm.functions;
+
+import kotlin.Function;
+
+public interface Function1<P1, R> extends Function<R>
+{
+    R invoke(P1 p0);
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/ranges/ClosedRange.java

@@ -0,0 +1,12 @@
+// Generated automatically from kotlin.ranges.ClosedRange for testing purposes
+
+package kotlin.ranges;
+
+
+public interface ClosedRange<T extends Comparable<? super T>>
+{
+    T getEndInclusive();
+    T getStart();
+    boolean contains(T p0);
+    boolean isEmpty();
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/ranges/IntProgression.java

@@ -0,0 +1,26 @@
+// Generated automatically from kotlin.ranges.IntProgression for testing purposes
+
+package kotlin.ranges;
+
+import kotlin.collections.IntIterator;
+import kotlin.jvm.internal.markers.KMappedMarker;
+
+public class IntProgression implements Iterable<Integer>, KMappedMarker
+{
+    protected IntProgression() {}
+    public IntIterator iterator(){ return null; }
+    public IntProgression(int p0, int p1, int p2){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public boolean isEmpty(){ return false; }
+    public final int getFirst(){ return 0; }
+    public final int getLast(){ return 0; }
+    public final int getStep(){ return 0; }
+    public int hashCode(){ return 0; }
+    public static IntProgression.Companion Companion = null;
+    static public class Companion
+    {
+        protected Companion() {}
+        public final IntProgression fromClosedRange(int p0, int p1, int p2){ return null; }
+    }
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/ranges/IntRange.java

@@ -0,0 +1,25 @@
+// Generated automatically from kotlin.ranges.IntRange for testing purposes
+
+package kotlin.ranges;
+
+import kotlin.ranges.ClosedRange;
+import kotlin.ranges.IntProgression;
+
+public class IntRange extends IntProgression implements ClosedRange<Integer>
+{
+    protected IntRange() {}
+    public IntRange(int p0, int p1){}
+    public Integer getEndInclusive(){ return null; }
+    public Integer getStart(){ return null; }
+    public String toString(){ return null; }
+    public boolean contains(Integer p0){ return false; } // manually corrected
+    public boolean equals(Object p0){ return false; }
+    public boolean isEmpty(){ return false; }
+    public int hashCode(){ return 0; }
+    public static IntRange.Companion Companion = null;
+    static public class Companion
+    {
+        protected Companion() {}
+        public final IntRange getEMPTY(){ return null; }
+    }
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/sequences/Sequence.java

@@ -0,0 +1,10 @@
+// Generated automatically from kotlin.sequences.Sequence for testing purposes
+
+package kotlin.sequences;
+
+import java.util.Iterator;
+
+public interface Sequence<T>
+{
+    Iterator<T> iterator();
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/text/FlagEnum.java

@@ -0,0 +1,10 @@
+// Generated automatically from kotlin.text.FlagEnum for testing purposes
+
+package kotlin.text;
+
+
+interface FlagEnum
+{
+    int getMask();
+    int getValue();
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/text/MatchGroup.java

@@ -0,0 +1,19 @@
+// Generated automatically from kotlin.text.MatchGroup for testing purposes
+
+package kotlin.text;
+
+import kotlin.ranges.IntRange;
+
+public class MatchGroup
+{
+    protected MatchGroup() {}
+    public MatchGroup(String p0, IntRange p1){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final IntRange component2(){ return null; }
+    public final IntRange getRange(){ return null; }
+    public final MatchGroup copy(String p0, IntRange p1){ return null; }
+    public final String component1(){ return null; }
+    public final String getValue(){ return null; }
+    public int hashCode(){ return 0; }
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/text/MatchGroupCollection.java

@@ -0,0 +1,12 @@
+// Generated automatically from kotlin.text.MatchGroupCollection for testing purposes
+
+package kotlin.text;
+
+import java.util.Collection;
+import kotlin.jvm.internal.markers.KMappedMarker;
+import kotlin.text.MatchGroup;
+
+public interface MatchGroupCollection extends Collection<MatchGroup>, KMappedMarker
+{
+    MatchGroup get(int p0);
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/text/MatchResult.java

@@ -0,0 +1,24 @@
+// Generated automatically from kotlin.text.MatchResult for testing purposes
+
+package kotlin.text;
+
+import java.util.List;
+import kotlin.ranges.IntRange;
+import kotlin.text.MatchGroupCollection;
+
+public interface MatchResult
+{
+    IntRange getRange();
+    List<String> getGroupValues();
+    MatchGroupCollection getGroups();
+    MatchResult next();
+    MatchResult.Destructured getDestructured();
+    String getValue();
+    static public class Destructured
+    {
+        protected Destructured() {}
+        public Destructured(MatchResult p0){}
+        public final List<String> toList(){ return null; }
+        public final MatchResult getMatch(){ return null; }
+    }
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/text/Regex.java

@@ -0,0 +1,42 @@
+// Generated automatically from kotlin.text.Regex for testing purposes
+
+package kotlin.text;
+
+import java.io.Serializable;
+import java.util.List;
+import java.util.Set;
+import java.util.regex.Pattern;
+import kotlin.jvm.functions.Function1;
+import kotlin.sequences.Sequence;
+import kotlin.text.MatchResult;
+import kotlin.text.RegexOption;
+
+public class Regex implements Serializable
+{
+    protected Regex() {}
+    public Regex(Pattern p0){}
+    public Regex(String p0){}
+    public Regex(String p0, RegexOption p1){}
+    public Regex(String p0, Set<? extends RegexOption> p1){}
+    public String toString(){ return null; }
+    public final List<String> split(CharSequence p0, int p1){ return null; }
+    public final MatchResult find(CharSequence p0, int p1){ return null; }
+    public final MatchResult matchEntire(CharSequence p0){ return null; }
+    public final Pattern toPattern(){ return null; }
+    public final Sequence<MatchResult> findAll(CharSequence p0, int p1){ return null; }
+    public final Set<RegexOption> getOptions(){ return null; }
+    public final String getPattern(){ return null; }
+    public final String replace(CharSequence p0, Function1<? super MatchResult, ? extends CharSequence> p1){ return null; }
+    public final String replace(CharSequence p0, String p1){ return null; }
+    public final String replaceFirst(CharSequence p0, String p1){ return null; }
+    public final boolean containsMatchIn(CharSequence p0){ return false; }
+    public final boolean matches(CharSequence p0){ return false; }
+    public static Regex.Companion Companion = null;
+    static public class Companion
+    {
+        protected Companion() {}
+        public final Regex fromLiteral(String p0){ return null; }
+        public final String escape(String p0){ return null; }
+        public final String escapeReplacement(String p0){ return null; }
+    }
+}

java/ql/test/stubs/okhttp-4.9.3/kotlin/text/RegexOption.java

@@ -0,0 +1,12 @@
+// Generated automatically from kotlin.text.RegexOption for testing purposes
+
+package kotlin.text;
+
+
+public enum RegexOption
+{
+    CANON_EQ, COMMENTS, DOT_MATCHES_ALL, IGNORE_CASE, LITERAL, MULTILINE, UNIX_LINES;
+    private RegexOption() {}
+    public int getMask(){ return 0; }
+    public int getValue(){ return 0; }
+}

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Address.java

@@ -15,70 +15,23 @@ import okhttp3.Dns;
 import okhttp3.HttpUrl;
 import okhttp3.Protocol;
 
-public class Address {
+public class Address
+{
     protected Address() {}
-
-    public Address(String p0, int p1, Dns p2, SocketFactory p3, SSLSocketFactory p4,
-            HostnameVerifier p5, CertificatePinner p6, Authenticator p7, Proxy p8,
-            List<? extends Protocol> p9, List<ConnectionSpec> p10, ProxySelector p11) {}
-
-    public String toString() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public final Authenticator proxyAuthenticator() {
-        return null;
-    }
-
-    public final CertificatePinner certificatePinner() {
-        return null;
-    }
-
-    public final Dns dns() {
-        return null;
-    }
-
-    public final HostnameVerifier hostnameVerifier() {
-        return null;
-    }
-
-    public final HttpUrl url() {
-        return null;
-    }
-
-    public final List<ConnectionSpec> connectionSpecs() {
-        return null;
-    }
-
-    public final List<Protocol> protocols() {
-        return null;
-    }
-
-    public final Proxy proxy() {
-        return null;
-    }
-
-    public final ProxySelector proxySelector() {
-        return null;
-    }
-
-    public final SSLSocketFactory sslSocketFactory() {
-        return null;
-    }
-
-    public final SocketFactory socketFactory() {
-        return null;
-    }
-
-    public final boolean equalsNonHost$okhttp(Address p0) {
-        return false;
-    }
-
-    public int hashCode() {
-        return 0;
-    }
+    public Address(String p0, int p1, Dns p2, SocketFactory p3, SSLSocketFactory p4, HostnameVerifier p5, CertificatePinner p6, Authenticator p7, Proxy p8, List<? extends Protocol> p9, List<ConnectionSpec> p10, ProxySelector p11){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final Authenticator proxyAuthenticator(){ return null; }
+    public final CertificatePinner certificatePinner(){ return null; }
+    public final Dns dns(){ return null; }
+    public final HostnameVerifier hostnameVerifier(){ return null; }
+    public final HttpUrl url(){ return null; }
+    public final List<ConnectionSpec> connectionSpecs(){ return null; }
+    public final List<Protocol> protocols(){ return null; }
+    public final Proxy proxy(){ return null; }
+    public final ProxySelector proxySelector(){ return null; }
+    public final SSLSocketFactory sslSocketFactory(){ return null; }
+    public final SocketFactory socketFactory(){ return null; }
+    public final boolean equalsNonHost$okhttp(Address p0){ return false; }
+    public int hashCode(){ return 0; }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Cache.java

@@ -16,122 +16,46 @@ import okhttp3.internal.cache.DiskLruCache;
 import okhttp3.internal.io.FileSystem;
 import okio.BufferedSource;
 
-public class Cache implements Closeable, Flushable {
+public class Cache implements Closeable, Flushable
+{
     protected Cache() {}
-
-    public Cache(File p0, long p1) {}
-
-    public Cache(File p0, long p1, FileSystem p2) {}
-
-    public final CacheRequest put$okhttp(Response p0) {
-        return null;
-    }
-
-    public final DiskLruCache getCache$okhttp() {
-        return null;
-    }
-
-    public final File directory() {
-        return null;
-    }
-
-    public final Iterator<String> urls() {
-        return null;
-    }
-
-    public final Response get$okhttp(Request p0) {
-        return null;
-    }
-
-    public final boolean isClosed() {
-        return false;
-    }
-
-    public final int getWriteAbortCount$okhttp() {
-        return 0;
-    }
-
-    public final int getWriteSuccessCount$okhttp() {
-        return 0;
-    }
-
-    public final int hitCount() {
-        return 0;
-    }
-
-    public final int networkCount() {
-        return 0;
-    }
-
-    public final int requestCount() {
-        return 0;
-    }
-
-    public final int writeAbortCount() {
-        return 0;
-    }
-
-    public final int writeSuccessCount() {
-        return 0;
-    }
-
-    public final long maxSize() {
-        return 0;
-    }
-
-    public final long size() {
-        return 0;
-    }
-
-    public final void delete() {}
-
-    public final void evictAll() {}
-
-    public final void initialize() {}
-
-    public final void remove$okhttp(Request p0) {}
-
-    public final void setWriteAbortCount$okhttp(int p0) {}
-
-    public final void setWriteSuccessCount$okhttp(int p0) {}
-
-    public final void trackConditionalCacheHit$okhttp() {}
-
-    public final void trackResponse$okhttp(CacheStrategy p0) {}
-
-    public final void update$okhttp(Response p0, Response p1) {}
-
+    public Cache(File p0, long p1){}
+    public Cache(File p0, long p1, FileSystem p2){}
+    public final CacheRequest put$okhttp(Response p0){ return null; }
+    public final DiskLruCache getCache$okhttp(){ return null; }
+    public final File directory(){ return null; }
+    public final Iterator<String> urls(){ return null; }
+    public final Response get$okhttp(Request p0){ return null; }
+    public final boolean isClosed(){ return false; }
+    public final int getWriteAbortCount$okhttp(){ return 0; }
+    public final int getWriteSuccessCount$okhttp(){ return 0; }
+    public final int hitCount(){ return 0; }
+    public final int networkCount(){ return 0; }
+    public final int requestCount(){ return 0; }
+    public final int writeAbortCount(){ return 0; }
+    public final int writeSuccessCount(){ return 0; }
+    public final long maxSize(){ return 0; }
+    public final long size(){ return 0; }
+    public final void delete(){}
+    public final void evictAll(){}
+    public final void initialize(){}
+    public final void remove$okhttp(Request p0){}
+    public final void setWriteAbortCount$okhttp(int p0){}
+    public final void setWriteSuccessCount$okhttp(int p0){}
+    public final void trackConditionalCacheHit$okhttp(){}
+    public final void trackResponse$okhttp(CacheStrategy p0){}
+    public final void update$okhttp(Response p0, Response p1){}
     public static Cache.Companion Companion = null;
-
-    public static String key(HttpUrl p0) {
-        return null;
-    }
-
-    public void close() {}
-
-    public void flush() {}
-
-    static public class Companion {
+    public static String key(HttpUrl p0){ return null; }
+    public void close(){}
+    public void flush(){}
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final Headers varyHeaders(Response p0) {
-            return null;
-        }
-
-        public final String key(HttpUrl p0) {
-            return null;
-        }
-
-        public final boolean hasVaryAll(Response p0) {
-            return false;
-        }
-
-        public final boolean varyMatches(Response p0, Headers p1, Request p2) {
-            return false;
-        }
-
-        public final int readInt$okhttp(BufferedSource p0) {
-            return 0;
-        }
+        public final Headers varyHeaders(Response p0){ return null; }
+        public final String key(HttpUrl p0){ return null; }
+        public final boolean hasVaryAll(Response p0){ return false; }
+        public final boolean varyMatches(Response p0, Headers p1, Request p2){ return false; }
+        public final int readInt$okhttp(BufferedSource p0){ return 0; }
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/CacheControl.java

@@ -4,75 +4,29 @@ package okhttp3;
 
 import okhttp3.Headers;
 
-public class CacheControl {
+public class CacheControl
+{
     protected CacheControl() {}
-
-    public String toString() {
-        return null;
-    }
-
-    public final boolean immutable() {
-        return false;
-    }
-
-    public final boolean isPrivate() {
-        return false;
-    }
-
-    public final boolean isPublic() {
-        return false;
-    }
-
-    public final boolean mustRevalidate() {
-        return false;
-    }
-
-    public final boolean noCache() {
-        return false;
-    }
-
-    public final boolean noStore() {
-        return false;
-    }
-
-    public final boolean noTransform() {
-        return false;
-    }
-
-    public final boolean onlyIfCached() {
-        return false;
-    }
-
-    public final int maxAgeSeconds() {
-        return 0;
-    }
-
-    public final int maxStaleSeconds() {
-        return 0;
-    }
-
-    public final int minFreshSeconds() {
-        return 0;
-    }
-
-    public final int sMaxAgeSeconds() {
-        return 0;
-    }
-
+    public String toString(){ return null; }
+    public final boolean immutable(){ return false; }
+    public final boolean isPrivate(){ return false; }
+    public final boolean isPublic(){ return false; }
+    public final boolean mustRevalidate(){ return false; }
+    public final boolean noCache(){ return false; }
+    public final boolean noStore(){ return false; }
+    public final boolean noTransform(){ return false; }
+    public final boolean onlyIfCached(){ return false; }
+    public final int maxAgeSeconds(){ return 0; }
+    public final int maxStaleSeconds(){ return 0; }
+    public final int minFreshSeconds(){ return 0; }
+    public final int sMaxAgeSeconds(){ return 0; }
     public static CacheControl FORCE_CACHE = null;
     public static CacheControl FORCE_NETWORK = null;
-
-    public static CacheControl parse(Headers p0) {
-        return null;
-    }
-
+    public static CacheControl parse(Headers p0){ return null; }
     public static CacheControl.Companion Companion = null;
-
-    static public class Companion {
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final CacheControl parse(Headers p0) {
-            return null;
-        }
+        public final CacheControl parse(Headers p0){ return null; }
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/CertificatePinner.java

@@ -28,6 +28,13 @@ public class CertificatePinner
     public static CertificatePinner DEFAULT = null;
     public static CertificatePinner.Companion Companion = null;
     public static String pin(Certificate p0){ return null; }
+    static public class Builder
+    {
+        public Builder(){}
+        public final CertificatePinner build(){ return null; }
+        public final CertificatePinner.Builder add(String p0, String... p1){ return null; }
+        public final List<CertificatePinner.Pin> getPins(){ return null; }
+    }
     static public class Companion
     {
         protected Companion() {}

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Challenge.java

@@ -5,42 +5,17 @@ package okhttp3;
 import java.nio.charset.Charset;
 import java.util.Map;
 
-public class Challenge {
+public class Challenge
+{
     protected Challenge() {}
-
-    public Challenge(String p0, Map<String, String> p1) {}
-
-    public Challenge(String p0, String p1) {}
-
-    public String toString() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public final Challenge withCharset(Charset p0) {
-        return null;
-    }
-
-    public final Charset charset() {
-        return null;
-    }
-
-    public final Map<String, String> authParams() {
-        return null;
-    }
-
-    public final String realm() {
-        return null;
-    }
-
-    public final String scheme() {
-        return null;
-    }
-
-    public int hashCode() {
-        return 0;
-    }
+    public Challenge(String p0, Map<String, String> p1){}
+    public Challenge(String p0, String p1){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final Challenge withCharset(Charset p0){ return null; }
+    public final Charset charset(){ return null; }
+    public final Map<String, String> authParams(){ return null; }
+    public final String realm(){ return null; }
+    public final String scheme(){ return null; }
+    public int hashCode(){ return 0; }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/CipherSuite.java

@@ -4,17 +4,11 @@ package okhttp3;
 
 import java.util.Comparator;
 
-public class CipherSuite {
+public class CipherSuite
+{
     protected CipherSuite() {}
-
-    public String toString() {
-        return null;
-    }
-
-    public final String javaName() {
-        return null;
-    }
-
+    public String toString(){ return null; }
+    public final String javaName(){ return null; }
     public static CipherSuite TLS_AES_128_CCM_8_SHA256 = null;
     public static CipherSuite TLS_AES_128_CCM_SHA256 = null;
     public static CipherSuite TLS_AES_128_GCM_SHA256 = null;
@@ -134,22 +128,12 @@ public class CipherSuite {
     public static CipherSuite TLS_RSA_WITH_RC4_128_MD5 = null;
     public static CipherSuite TLS_RSA_WITH_RC4_128_SHA = null;
     public static CipherSuite TLS_RSA_WITH_SEED_CBC_SHA = null;
-
-    public static CipherSuite forJavaName(String p0) {
-        return null;
-    }
-
+    public static CipherSuite forJavaName(String p0){ return null; }
     public static CipherSuite.Companion Companion = null;
-
-    static public class Companion {
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final CipherSuite forJavaName(String p0) {
-            return null;
-        }
-
-        public final Comparator<String> getORDER_BY_NAME$okhttp() {
-            return null;
-        }
+        public final CipherSuite forJavaName(String p0){ return null; }
+        public final Comparator<String> getORDER_BY_NAME$okhttp(){ return null; }
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/ConnectionSpec.java

@@ -7,52 +7,26 @@ import javax.net.ssl.SSLSocket;
 import okhttp3.CipherSuite;
 import okhttp3.TlsVersion;
 
-public class ConnectionSpec {
+public class ConnectionSpec
+{
     protected ConnectionSpec() {}
-
-    public ConnectionSpec(boolean p0, boolean p1, String[] p2, String[] p3) {}
-
-    public String toString() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public final List<CipherSuite> cipherSuites() {
-        return null;
-    }
-
-    public final List<TlsVersion> tlsVersions() {
-        return null;
-    }
-
-    public final boolean isCompatible(SSLSocket p0) {
-        return false;
-    }
-
-    public final boolean isTls() {
-        return false;
-    }
-
-    public final boolean supportsTlsExtensions() {
-        return false;
-    }
-
-    public final void apply$okhttp(SSLSocket p0, boolean p1) {}
-
-    public int hashCode() {
-        return 0;
-    }
-
+    public ConnectionSpec(boolean p0, boolean p1, String[] p2, String[] p3){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final List<CipherSuite> cipherSuites(){ return null; }
+    public final List<TlsVersion> tlsVersions(){ return null; }
+    public final boolean isCompatible(SSLSocket p0){ return false; }
+    public final boolean isTls(){ return false; }
+    public final boolean supportsTlsExtensions(){ return false; }
+    public final void apply$okhttp(SSLSocket p0, boolean p1){}
+    public int hashCode(){ return 0; }
     public static ConnectionSpec CLEARTEXT = null;
     public static ConnectionSpec COMPATIBLE_TLS = null;
     public static ConnectionSpec MODERN_TLS = null;
     public static ConnectionSpec RESTRICTED_TLS = null;
     public static ConnectionSpec.Companion Companion = null;
-
-    static public class Companion {
+    static public class Companion
+    {
         protected Companion() {}
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Cookie.java

@@ -6,88 +6,31 @@ import java.util.List;
 import okhttp3.Headers;
 import okhttp3.HttpUrl;
 
-public class Cookie {
+public class Cookie
+{
     protected Cookie() {}
-
-    public String toString() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public final String domain() {
-        return null;
-    }
-
-    public final String name() {
-        return null;
-    }
-
-    public final String path() {
-        return null;
-    }
-
-    public final String toString$okhttp(boolean p0) {
-        return null;
-    }
-
-    public final String value() {
-        return null;
-    }
-
-    public final boolean hostOnly() {
-        return false;
-    }
-
-    public final boolean httpOnly() {
-        return false;
-    }
-
-    public final boolean matches(HttpUrl p0) {
-        return false;
-    }
-
-    public final boolean persistent() {
-        return false;
-    }
-
-    public final boolean secure() {
-        return false;
-    }
-
-    public final long expiresAt() {
-        return 0;
-    }
-
-    public int hashCode() {
-        return 0;
-    }
-
-    public static Cookie parse(HttpUrl p0, String p1) {
-        return null;
-    }
-
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final String domain(){ return null; }
+    public final String name(){ return null; }
+    public final String path(){ return null; }
+    public final String toString$okhttp(boolean p0){ return null; }
+    public final String value(){ return null; }
+    public final boolean hostOnly(){ return false; }
+    public final boolean httpOnly(){ return false; }
+    public final boolean matches(HttpUrl p0){ return false; }
+    public final boolean persistent(){ return false; }
+    public final boolean secure(){ return false; }
+    public final long expiresAt(){ return 0; }
+    public int hashCode(){ return 0; }
+    public static Cookie parse(HttpUrl p0, String p1){ return null; }
     public static Cookie.Companion Companion = null;
-
-    public static List<Cookie> parseAll(HttpUrl p0, Headers p1) {
-        return null;
-    }
-
-    static public class Companion {
+    public static List<Cookie> parseAll(HttpUrl p0, Headers p1){ return null; }
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final Cookie parse$okhttp(long p0, HttpUrl p1, String p2) {
-            return null;
-        }
-
-        public final Cookie parse(HttpUrl p0, String p1) {
-            return null;
-        }
-
-        public final List<Cookie> parseAll(HttpUrl p0, Headers p1) {
-            return null;
-        }
+        public final Cookie parse$okhttp(long p0, HttpUrl p1, String p2){ return null; }
+        public final Cookie parse(HttpUrl p0, String p1){ return null; }
+        public final List<Cookie> parseAll(HttpUrl p0, Headers p1){ return null; }
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Dispatcher.java

@@ -7,56 +7,24 @@ import java.util.concurrent.ExecutorService;
 import okhttp3.Call;
 import okhttp3.internal.connection.RealCall;
 
-public class Dispatcher {
-    public Dispatcher() {}
-
-    public Dispatcher(ExecutorService p0) {}
-
-    public final ExecutorService executorService() {
-        return null;
-    }
-
-    public final List<Call> queuedCalls() {
-        return null;
-    }
-
-    public final List<Call> runningCalls() {
-        return null;
-    }
-
-    public final Runnable getIdleCallback() {
-        return null;
-    }
-
-    public final int getMaxRequests() {
-        return 0;
-    }
-
-    public final int getMaxRequestsPerHost() {
-        return 0;
-    }
-
-    public final int queuedCallsCount() {
-        return 0;
-    }
-
-    public final int runningCallsCount() {
-        return 0;
-    }
-
-    public final void cancelAll() {}
-
-    public final void enqueue$okhttp(RealCall.AsyncCall p0) {}
-
-    public final void executed$okhttp(RealCall p0) {}
-
-    public final void finished$okhttp(RealCall p0) {}
-
-    public final void finished$okhttp(RealCall.AsyncCall p0) {}
-
-    public final void setIdleCallback(Runnable p0) {}
-
-    public final void setMaxRequests(int p0) {}
-
-    public final void setMaxRequestsPerHost(int p0) {}
+public class Dispatcher
+{
+    public Dispatcher(){}
+    public Dispatcher(ExecutorService p0){}
+    public final ExecutorService executorService(){ return null; }
+    public final List<Call> queuedCalls(){ return null; }
+    public final List<Call> runningCalls(){ return null; }
+    public final Runnable getIdleCallback(){ return null; }
+    public final int getMaxRequests(){ return 0; }
+    public final int getMaxRequestsPerHost(){ return 0; }
+    public final int queuedCallsCount(){ return 0; }
+    public final int runningCallsCount(){ return 0; }
+    public final void cancelAll(){}
+    public final void enqueue$okhttp(RealCall.AsyncCall p0){}
+    public final void executed$okhttp(RealCall p0){}
+    public final void finished$okhttp(RealCall p0){}
+    public final void finished$okhttp(RealCall.AsyncCall p0){}
+    public final void setIdleCallback(Runnable p0){}
+    public final void setMaxRequests(int p0){}
+    public final void setMaxRequestsPerHost(int p0){}
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Handshake.java

@@ -10,69 +10,26 @@ import kotlin.jvm.functions.Function0;
 import okhttp3.CipherSuite;
 import okhttp3.TlsVersion;
 
-public class Handshake {
+public class Handshake
+{
     protected Handshake() {}
-
-    public Handshake(TlsVersion p0, CipherSuite p1, List<? extends Certificate> p2,
-            Function0<? extends List<? extends Certificate>> p3) {}
-
-    public String toString() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public final CipherSuite cipherSuite() {
-        return null;
-    }
-
-    public final List<Certificate> localCertificates() {
-        return null;
-    }
-
-    public final List<Certificate> peerCertificates() {
-        return null;
-    }
-
-    public final Principal localPrincipal() {
-        return null;
-    }
-
-    public final Principal peerPrincipal() {
-        return null;
-    }
-
-    public final TlsVersion tlsVersion() {
-        return null;
-    }
-
-    public int hashCode() {
-        return 0;
-    }
-
-    public static Handshake get(SSLSession p0) {
-        return null;
-    }
-
-    public static Handshake get(TlsVersion p0, CipherSuite p1, List<? extends Certificate> p2,
-            List<? extends Certificate> p3) {
-        return null;
-    }
-
+    public Handshake(TlsVersion p0, CipherSuite p1, List<? extends Certificate> p2, Function0<? extends List<? extends Certificate>> p3){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final CipherSuite cipherSuite(){ return null; }
+    public final List<Certificate> localCertificates(){ return null; }
+    public final List<Certificate> peerCertificates(){ return null; }
+    public final Principal localPrincipal(){ return null; }
+    public final Principal peerPrincipal(){ return null; }
+    public final TlsVersion tlsVersion(){ return null; }
+    public int hashCode(){ return 0; }
+    public static Handshake get(SSLSession p0){ return null; }
+    public static Handshake get(TlsVersion p0, CipherSuite p1, List<? extends Certificate> p2, List<? extends Certificate> p3){ return null; }
     public static Handshake.Companion Companion = null;
-
-    static public class Companion {
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final Handshake get(SSLSession p0) {
-            return null;
-        }
-
-        public final Handshake get(TlsVersion p0, CipherSuite p1, List<? extends Certificate> p2,
-                List<? extends Certificate> p3) {
-            return null;
-        }
+        public final Handshake get(SSLSession p0){ return null; }
+        public final Handshake get(TlsVersion p0, CipherSuite p1, List<? extends Certificate> p2, List<? extends Certificate> p3){ return null; }
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/HttpUrl.java

@@ -8,156 +8,46 @@ import java.nio.charset.Charset;
 import java.util.List;
 import java.util.Set;
 
-public class HttpUrl {
+public class HttpUrl
+{
     protected HttpUrl() {}
-
-    public HttpUrl(String p0, String p1, String p2, String p3, int p4, List<String> p5,
-            List<String> p6, String p7, String p8) {}
-
-    public String toString() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public final HttpUrl resolve(String p0) {
-        return null;
-    }
-
-    public final HttpUrl.Builder newBuilder() {
-        return null;
-    }
-
-    public final HttpUrl.Builder newBuilder(String p0) {
-        return null;
-    }
-
-    public final List<String> encodedPathSegments() {
-        return null;
-    }
-
-    public final List<String> pathSegments() {
-        return null;
-    }
-
-    public final List<String> queryParameterValues(String p0) {
-        return null;
-    }
-
-    public final Set<String> queryParameterNames() {
-        return null;
-    }
-
-    public final String encodedFragment() {
-        return null;
-    }
-
-    public final String encodedPassword() {
-        return null;
-    }
-
-    public final String encodedPath() {
-        return null;
-    }
-
-    public final String encodedQuery() {
-        return null;
-    }
-
-    public final String encodedUsername() {
-        return null;
-    }
-
-    public final String fragment() {
-        return null;
-    }
-
-    public final String host() {
-        return null;
-    }
-
-    public final String password() {
-        return null;
-    }
-
-    public final String query() {
-        return null;
-    }
-
-    public final String queryParameter(String p0) {
-        return null;
-    }
-
-    public final String queryParameterName(int p0) {
-        return null;
-    }
-
-    public final String queryParameterValue(int p0) {
-        return null;
-    }
-
-    public final String redact() {
-        return null;
-    }
-
-    public final String scheme() {
-        return null;
-    }
-
-    public final String topPrivateDomain() {
-        return null;
-    }
-
-    public final String username() {
-        return null;
-    }
-
-    public final URI uri() {
-        return null;
-    }
-
-    public final URL url() {
-        return null;
-    }
-
-    public final boolean isHttps() {
-        return false;
-    }
-
-    public final int pathSize() {
-        return 0;
-    }
-
-    public final int port() {
-        return 0;
-    }
-
-    public final int querySize() {
-        return 0;
-    }
-
-    public int hashCode() {
-        return 0;
-    }
-
-    public static HttpUrl get(String p0) {
-        return null;
-    }
-
-    public static HttpUrl get(URI p0) {
-        return null;
-    }
-
-    public static HttpUrl get(URL p0) {
-        return null;
-    }
-
-    public static HttpUrl parse(String p0) {
-        return null;
-    }
-
+    public HttpUrl(String p0, String p1, String p2, String p3, int p4, List<String> p5, List<String> p6, String p7, String p8){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final HttpUrl resolve(String p0){ return null; }
+    public final HttpUrl.Builder newBuilder(){ return null; }
+    public final HttpUrl.Builder newBuilder(String p0){ return null; }
+    public final List<String> encodedPathSegments(){ return null; }
+    public final List<String> pathSegments(){ return null; }
+    public final List<String> queryParameterValues(String p0){ return null; }
+    public final Set<String> queryParameterNames(){ return null; }
+    public final String encodedFragment(){ return null; }
+    public final String encodedPassword(){ return null; }
+    public final String encodedPath(){ return null; }
+    public final String encodedQuery(){ return null; }
+    public final String encodedUsername(){ return null; }
+    public final String fragment(){ return null; }
+    public final String host(){ return null; }
+    public final String password(){ return null; }
+    public final String query(){ return null; }
+    public final String queryParameter(String p0){ return null; }
+    public final String queryParameterName(int p0){ return null; }
+    public final String queryParameterValue(int p0){ return null; }
+    public final String redact(){ return null; }
+    public final String scheme(){ return null; }
+    public final String topPrivateDomain(){ return null; }
+    public final String username(){ return null; }
+    public final URI uri(){ return null; }
+    public final URL url(){ return null; }
+    public final boolean isHttps(){ return false; }
+    public final int pathSize(){ return 0; }
+    public final int port(){ return 0; }
+    public final int querySize(){ return 0; }
+    public int hashCode(){ return 0; }
+    public static HttpUrl get(String p0){ return null; }
+    public static HttpUrl get(URI p0){ return null; }
+    public static HttpUrl get(URL p0){ return null; }
+    public static HttpUrl parse(String p0){ return null; }
     public static HttpUrl.Companion Companion = null;
     public static String FORM_ENCODE_SET = null;
     public static String FRAGMENT_ENCODE_SET = null;
@@ -170,221 +60,73 @@ public class HttpUrl {
     public static String QUERY_COMPONENT_REENCODE_SET = null;
     public static String QUERY_ENCODE_SET = null;
     public static String USERNAME_ENCODE_SET = null;
-
-    public static int defaultPort(String p0) {
-        return 0;
-    }
-
-    static public class Builder {
-        public Builder() {}
-
-        public String toString() {
-            return null;
-        }
-
-        public final HttpUrl build() {
-            return null;
-        }
-
-        public final HttpUrl.Builder addEncodedPathSegment(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder addEncodedPathSegments(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder addEncodedQueryParameter(String p0, String p1) {
-            return null;
-        }
-
-        public final HttpUrl.Builder addPathSegment(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder addPathSegments(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder addQueryParameter(String p0, String p1) {
-            return null;
-        }
-
-        public final HttpUrl.Builder encodedFragment(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder encodedPassword(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder encodedPath(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder encodedQuery(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder encodedUsername(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder fragment(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder host(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder parse$okhttp(HttpUrl p0, String p1) {
-            return null;
-        }
-
-        public final HttpUrl.Builder password(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder port(int p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder query(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder reencodeForUri$okhttp() {
-            return null;
-        }
-
-        public final HttpUrl.Builder removeAllEncodedQueryParameters(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder removeAllQueryParameters(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder removePathSegment(int p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder scheme(String p0) {
-            return null;
-        }
-
-        public final HttpUrl.Builder setEncodedPathSegment(int p0, String p1) {
-            return null;
-        }
-
-        public final HttpUrl.Builder setEncodedQueryParameter(String p0, String p1) {
-            return null;
-        }
-
-        public final HttpUrl.Builder setPathSegment(int p0, String p1) {
-            return null;
-        }
-
-        public final HttpUrl.Builder setQueryParameter(String p0, String p1) {
-            return null;
-        }
-
-        public final HttpUrl.Builder username(String p0) {
-            return null;
-        }
-
-        public final List<String> getEncodedPathSegments$okhttp() {
-            return null;
-        }
-
-        public final List<String> getEncodedQueryNamesAndValues$okhttp() {
-            return null;
-        }
-
-        public final String getEncodedFragment$okhttp() {
-            return null;
-        }
-
-        public final String getEncodedPassword$okhttp() {
-            return null;
-        }
-
-        public final String getEncodedUsername$okhttp() {
-            return null;
-        }
-
-        public final String getHost$okhttp() {
-            return null;
-        }
-
-        public final String getScheme$okhttp() {
-            return null;
-        }
-
-        public final int getPort$okhttp() {
-            return 0;
-        }
-
-        public final void setEncodedFragment$okhttp(String p0) {}
-
-        public final void setEncodedPassword$okhttp(String p0) {}
-
-        public final void setEncodedQueryNamesAndValues$okhttp(List<String> p0) {}
-
-        public final void setEncodedUsername$okhttp(String p0) {}
-
-        public final void setHost$okhttp(String p0) {}
-
-        public final void setPort$okhttp(int p0) {}
-
-        public final void setScheme$okhttp(String p0) {}
-
+    public static int defaultPort(String p0){ return 0; }
+    static public class Builder
+    {
+        public Builder(){}
+        public String toString(){ return null; }
+        public final HttpUrl build(){ return null; }
+        public final HttpUrl.Builder addEncodedPathSegment(String p0){ return null; }
+        public final HttpUrl.Builder addEncodedPathSegments(String p0){ return null; }
+        public final HttpUrl.Builder addEncodedQueryParameter(String p0, String p1){ return null; }
+        public final HttpUrl.Builder addPathSegment(String p0){ return null; }
+        public final HttpUrl.Builder addPathSegments(String p0){ return null; }
+        public final HttpUrl.Builder addQueryParameter(String p0, String p1){ return null; }
+        public final HttpUrl.Builder encodedFragment(String p0){ return null; }
+        public final HttpUrl.Builder encodedPassword(String p0){ return null; }
+        public final HttpUrl.Builder encodedPath(String p0){ return null; }
+        public final HttpUrl.Builder encodedQuery(String p0){ return null; }
+        public final HttpUrl.Builder encodedUsername(String p0){ return null; }
+        public final HttpUrl.Builder fragment(String p0){ return null; }
+        public final HttpUrl.Builder host(String p0){ return null; }
+        public final HttpUrl.Builder parse$okhttp(HttpUrl p0, String p1){ return null; }
+        public final HttpUrl.Builder password(String p0){ return null; }
+        public final HttpUrl.Builder port(int p0){ return null; }
+        public final HttpUrl.Builder query(String p0){ return null; }
+        public final HttpUrl.Builder reencodeForUri$okhttp(){ return null; }
+        public final HttpUrl.Builder removeAllEncodedQueryParameters(String p0){ return null; }
+        public final HttpUrl.Builder removeAllQueryParameters(String p0){ return null; }
+        public final HttpUrl.Builder removePathSegment(int p0){ return null; }
+        public final HttpUrl.Builder scheme(String p0){ return null; }
+        public final HttpUrl.Builder setEncodedPathSegment(int p0, String p1){ return null; }
+        public final HttpUrl.Builder setEncodedQueryParameter(String p0, String p1){ return null; }
+        public final HttpUrl.Builder setPathSegment(int p0, String p1){ return null; }
+        public final HttpUrl.Builder setQueryParameter(String p0, String p1){ return null; }
+        public final HttpUrl.Builder username(String p0){ return null; }
+        public final List<String> getEncodedPathSegments$okhttp(){ return null; }
+        public final List<String> getEncodedQueryNamesAndValues$okhttp(){ return null; }
+        public final String getEncodedFragment$okhttp(){ return null; }
+        public final String getEncodedPassword$okhttp(){ return null; }
+        public final String getEncodedUsername$okhttp(){ return null; }
+        public final String getHost$okhttp(){ return null; }
+        public final String getScheme$okhttp(){ return null; }
+        public final int getPort$okhttp(){ return 0; }
+        public final void setEncodedFragment$okhttp(String p0){}
+        public final void setEncodedPassword$okhttp(String p0){}
+        public final void setEncodedQueryNamesAndValues$okhttp(List<String> p0){}
+        public final void setEncodedUsername$okhttp(String p0){}
+        public final void setHost$okhttp(String p0){}
+        public final void setPort$okhttp(int p0){}
+        public final void setScheme$okhttp(String p0){}
         public static HttpUrl.Builder.Companion Companion = null;
         public static String INVALID_HOST = null;
-
-        static public class Companion {
+        static public class Companion
+        {
             protected Companion() {}
         }
     }
-    static public class Companion {
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final HttpUrl get(String p0) {
-            return null;
-        }
-
-        public final HttpUrl get(URI p0) {
-            return null;
-        }
-
-        public final HttpUrl get(URL p0) {
-            return null;
-        }
-
-        public final HttpUrl parse(String p0) {
-            return null;
-        }
-
-        public final List<String> toQueryNamesAndValues$okhttp(String p0) {
-            return null;
-        }
-
-        public final String canonicalize$okhttp(String p0, int p1, int p2, String p3, boolean p4,
-                boolean p5, boolean p6, boolean p7, Charset p8) {
-            return null;
-        }
-
-        public final String percentDecode$okhttp(String p0, int p1, int p2, boolean p3) {
-            return null;
-        }
-
-        public final int defaultPort(String p0) {
-            return 0;
-        }
-
-        public final void toPathString$okhttp(List<String> p0, StringBuilder p1) {}
-
-        public final void toQueryString$okhttp(List<String> p0, StringBuilder p1) {}
+        public final HttpUrl get(String p0){ return null; }
+        public final HttpUrl get(URI p0){ return null; }
+        public final HttpUrl get(URL p0){ return null; }
+        public final HttpUrl parse(String p0){ return null; }
+        public final List<String> toQueryNamesAndValues$okhttp(String p0){ return null; }
+        public final String canonicalize$okhttp(String p0, int p1, int p2, String p3, boolean p4, boolean p5, boolean p6, boolean p7, Charset p8){ return null; }
+        public final String percentDecode$okhttp(String p0, int p1, int p2, boolean p3){ return null; }
+        public final int defaultPort(String p0){ return 0; }
+        public final void toPathString$okhttp(List<String> p0, StringBuilder p1){}
+        public final void toQueryString$okhttp(List<String> p0, StringBuilder p1){}
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/MediaType.java

@@ -4,60 +4,24 @@ package okhttp3;
 
 import java.nio.charset.Charset;
 
-public class MediaType {
+public class MediaType
+{
     protected MediaType() {}
-
-    public String toString() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public final Charset charset() {
-        return null;
-    }
-
-    public final Charset charset(Charset p0) {
-        return null;
-    }
-
-    public final String parameter(String p0) {
-        return null;
-    }
-
-    public final String subtype() {
-        return null;
-    }
-
-    public final String type() {
-        return null;
-    }
-
-    public int hashCode() {
-        return 0;
-    }
-
-    public static MediaType get(String p0) {
-        return null;
-    }
-
-    public static MediaType parse(String p0) {
-        return null;
-    }
-
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final Charset charset(){ return null; }
+    public final Charset charset(Charset p0){ return null; }
+    public final String parameter(String p0){ return null; }
+    public final String subtype(){ return null; }
+    public final String type(){ return null; }
+    public int hashCode(){ return 0; }
+    public static MediaType get(String p0){ return null; }
+    public static MediaType parse(String p0){ return null; }
     public static MediaType.Companion Companion = null;
-
-    static public class Companion {
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final MediaType get(String p0) {
-            return null;
-        }
-
-        public final MediaType parse(String p0) {
-            return null;
-        }
+        public final MediaType get(String p0){ return null; }
+        public final MediaType parse(String p0){ return null; }
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/OkHttpClient.java

@@ -11,7 +11,6 @@ import javax.net.SocketFactory;
 import javax.net.ssl.HostnameVerifier;
 import javax.net.ssl.SSLSocketFactory;
 import javax.net.ssl.X509TrustManager;
-import kotlin.jvm.functions.Function1;
 import okhttp3.Authenticator;
 import okhttp3.Cache;
 import okhttp3.Call;
@@ -25,504 +24,154 @@ import okhttp3.EventListener;
 import okhttp3.Interceptor;
 import okhttp3.Protocol;
 import okhttp3.Request;
-import okhttp3.Response;
 import okhttp3.WebSocket;
 import okhttp3.WebSocketListener;
 import okhttp3.internal.connection.RouteDatabase;
 import okhttp3.internal.tls.CertificateChainCleaner;
 
-public class OkHttpClient implements Call.Factory, Cloneable, WebSocket.Factory {
-    public Call newCall(Request p0) {
-        return null;
-    }
-
-    public Object clone() {
-        return null;
-    }
-
-    public OkHttpClient() {}
-
-    public OkHttpClient(OkHttpClient.Builder p0) {}
-
-    public OkHttpClient.Builder newBuilder() {
-        return null;
-    }
-
-    public WebSocket newWebSocket(Request p0, WebSocketListener p1) {
-        return null;
-    }
-
-    public final Authenticator authenticator() {
-        return null;
-    }
-
-    public final Authenticator proxyAuthenticator() {
-        return null;
-    }
-
-    public final Cache cache() {
-        return null;
-    }
-
-    public final CertificateChainCleaner certificateChainCleaner() {
-        return null;
-    }
-
-    public final CertificatePinner certificatePinner() {
-        return null;
-    }
-
-    public final ConnectionPool connectionPool() {
-        return null;
-    }
-
-    public final CookieJar cookieJar() {
-        return null;
-    }
-
-    public final Dispatcher dispatcher() {
-        return null;
-    }
-
-    public final Dns dns() {
-        return null;
-    }
-
-    public final EventListener.Factory eventListenerFactory() {
-        return null;
-    }
-
-    public final HostnameVerifier hostnameVerifier() {
-        return null;
-    }
-
-    public final List<ConnectionSpec> connectionSpecs() {
-        return null;
-    }
-
-    public final List<Interceptor> interceptors() {
-        return null;
-    }
-
-    public final List<Interceptor> networkInterceptors() {
-        return null;
-    }
-
-    public final List<Protocol> protocols() {
-        return null;
-    }
-
-    public final Proxy proxy() {
-        return null;
-    }
-
-    public final ProxySelector proxySelector() {
-        return null;
-    }
-
-    public final RouteDatabase getRouteDatabase() {
-        return null;
-    }
-
-    public final SSLSocketFactory sslSocketFactory() {
-        return null;
-    }
-
-    public final SocketFactory socketFactory() {
-        return null;
-    }
-
-    public final X509TrustManager x509TrustManager() {
-        return null;
-    }
-
-    public final boolean followRedirects() {
-        return false;
-    }
-
-    public final boolean followSslRedirects() {
-        return false;
-    }
-
-    public final boolean retryOnConnectionFailure() {
-        return false;
-    }
-
-    public final int callTimeoutMillis() {
-        return 0;
-    }
-
-    public final int connectTimeoutMillis() {
-        return 0;
-    }
-
-    public final int pingIntervalMillis() {
-        return 0;
-    }
-
-    public final int readTimeoutMillis() {
-        return 0;
-    }
-
-    public final int writeTimeoutMillis() {
-        return 0;
-    }
-
-    public final long minWebSocketMessageToCompress() {
-        return 0;
-    }
-
+public class OkHttpClient implements Call.Factory, Cloneable, WebSocket.Factory
+{
+    public Call newCall(Request p0){ return null; }
+    public Object clone(){ return null; }
+    public OkHttpClient(){}
+    public OkHttpClient(OkHttpClient.Builder p0){}
+    public OkHttpClient.Builder newBuilder(){ return null; }
+    public WebSocket newWebSocket(Request p0, WebSocketListener p1){ return null; }
+    public final Authenticator authenticator(){ return null; }
+    public final Authenticator proxyAuthenticator(){ return null; }
+    public final Cache cache(){ return null; }
+    public final CertificateChainCleaner certificateChainCleaner(){ return null; }
+    public final CertificatePinner certificatePinner(){ return null; }
+    public final ConnectionPool connectionPool(){ return null; }
+    public final CookieJar cookieJar(){ return null; }
+    public final Dispatcher dispatcher(){ return null; }
+    public final Dns dns(){ return null; }
+    public final EventListener.Factory eventListenerFactory(){ return null; }
+    public final HostnameVerifier hostnameVerifier(){ return null; }
+    public final List<ConnectionSpec> connectionSpecs(){ return null; }
+    public final List<Interceptor> interceptors(){ return null; }
+    public final List<Interceptor> networkInterceptors(){ return null; }
+    public final List<Protocol> protocols(){ return null; }
+    public final Proxy proxy(){ return null; }
+    public final ProxySelector proxySelector(){ return null; }
+    public final RouteDatabase getRouteDatabase(){ return null; }
+    public final SSLSocketFactory sslSocketFactory(){ return null; }
+    public final SocketFactory socketFactory(){ return null; }
+    public final X509TrustManager x509TrustManager(){ return null; }
+    public final boolean followRedirects(){ return false; }
+    public final boolean followSslRedirects(){ return false; }
+    public final boolean retryOnConnectionFailure(){ return false; }
+    public final int callTimeoutMillis(){ return 0; }
+    public final int connectTimeoutMillis(){ return 0; }
+    public final int pingIntervalMillis(){ return 0; }
+    public final int readTimeoutMillis(){ return 0; }
+    public final int writeTimeoutMillis(){ return 0; }
+    public final long minWebSocketMessageToCompress(){ return 0; }
     public static OkHttpClient.Companion Companion = null;
-
-    static public class Builder {
-        public Builder() {}
-
-        public Builder(OkHttpClient p0) {}
-
-        public final Authenticator getAuthenticator$okhttp() {
-            return null;
-        }
-
-        public final Authenticator getProxyAuthenticator$okhttp() {
-            return null;
-        }
-
-        public final Cache getCache$okhttp() {
-            return null;
-        }
-
-        public final CertificateChainCleaner getCertificateChainCleaner$okhttp() {
-            return null;
-        }
-
-        public final CertificatePinner getCertificatePinner$okhttp() {
-            return null;
-        }
-
-        public final ConnectionPool getConnectionPool$okhttp() {
-            return null;
-        }
-
-        public final CookieJar getCookieJar$okhttp() {
-            return null;
-        }
-
-        public final Dispatcher getDispatcher$okhttp() {
-            return null;
-        }
-
-        public final Dns getDns$okhttp() {
-            return null;
-        }
-
-        public final EventListener.Factory getEventListenerFactory$okhttp() {
-            return null;
-        }
-
-        public final HostnameVerifier getHostnameVerifier$okhttp() {
-            return null;
-        }
-
-        public final List<ConnectionSpec> getConnectionSpecs$okhttp() {
-            return null;
-        }
-
-        public final List<Interceptor> getInterceptors$okhttp() {
-            return null;
-        }
-
-        public final List<Interceptor> getNetworkInterceptors$okhttp() {
-            return null;
-        }
-
-        public final List<Interceptor> interceptors() {
-            return null;
-        }
-
-        public final List<Interceptor> networkInterceptors() {
-            return null;
-        }
-
-        public final List<Protocol> getProtocols$okhttp() {
-            return null;
-        }
-
-        public final OkHttpClient build() {
-            return null;
-        }
-
-        public final OkHttpClient.Builder addInterceptor(
-                Function1<? super Interceptor.Chain, Response> p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder addNetworkInterceptor(
-                Function1<? super Interceptor.Chain, Response> p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder addInterceptor(Interceptor p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder addNetworkInterceptor(Interceptor p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder authenticator(Authenticator p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder cache(Cache p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder callTimeout(Duration p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder callTimeout(long p0, TimeUnit p1) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder certificatePinner(CertificatePinner p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder connectTimeout(Duration p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder connectTimeout(long p0, TimeUnit p1) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder connectionPool(ConnectionPool p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder connectionSpecs(List<ConnectionSpec> p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder cookieJar(CookieJar p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder dispatcher(Dispatcher p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder dns(Dns p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder eventListener(EventListener p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder eventListenerFactory(EventListener.Factory p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder followRedirects(boolean p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder followSslRedirects(boolean p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder hostnameVerifier(HostnameVerifier p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder minWebSocketMessageToCompress(long p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder pingInterval(Duration p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder pingInterval(long p0, TimeUnit p1) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder protocols(List<? extends Protocol> p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder proxy(Proxy p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder proxyAuthenticator(Authenticator p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder proxySelector(ProxySelector p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder readTimeout(Duration p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder readTimeout(long p0, TimeUnit p1) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder retryOnConnectionFailure(boolean p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder socketFactory(SocketFactory p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder sslSocketFactory(SSLSocketFactory p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder sslSocketFactory(SSLSocketFactory p0,
-                X509TrustManager p1) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder writeTimeout(Duration p0) {
-            return null;
-        }
-
-        public final OkHttpClient.Builder writeTimeout(long p0, TimeUnit p1) {
-            return null;
-        }
-
-        public final Proxy getProxy$okhttp() {
-            return null;
-        }
-
-        public final ProxySelector getProxySelector$okhttp() {
-            return null;
-        }
-
-        public final RouteDatabase getRouteDatabase$okhttp() {
-            return null;
-        }
-
-        public final SSLSocketFactory getSslSocketFactoryOrNull$okhttp() {
-            return null;
-        }
-
-        public final SocketFactory getSocketFactory$okhttp() {
-            return null;
-        }
-
-        public final X509TrustManager getX509TrustManagerOrNull$okhttp() {
-            return null;
-        }
-
-        public final boolean getFollowRedirects$okhttp() {
-            return false;
-        }
-
-        public final boolean getFollowSslRedirects$okhttp() {
-            return false;
-        }
-
-        public final boolean getRetryOnConnectionFailure$okhttp() {
-            return false;
-        }
-
-        public final int getCallTimeout$okhttp() {
-            return 0;
-        }
-
-        public final int getConnectTimeout$okhttp() {
-            return 0;
-        }
-
-        public final int getPingInterval$okhttp() {
-            return 0;
-        }
-
-        public final int getReadTimeout$okhttp() {
-            return 0;
-        }
-
-        public final int getWriteTimeout$okhttp() {
-            return 0;
-        }
-
-        public final long getMinWebSocketMessageToCompress$okhttp() {
-            return 0;
-        }
-
-        public final void setAuthenticator$okhttp(Authenticator p0) {}
-
-        public final void setCache$okhttp(Cache p0) {}
-
-        public final void setCallTimeout$okhttp(int p0) {}
-
-        public final void setCertificateChainCleaner$okhttp(CertificateChainCleaner p0) {}
-
-        public final void setCertificatePinner$okhttp(CertificatePinner p0) {}
-
-        public final void setConnectTimeout$okhttp(int p0) {}
-
-        public final void setConnectionPool$okhttp(ConnectionPool p0) {}
-
-        public final void setConnectionSpecs$okhttp(List<ConnectionSpec> p0) {}
-
-        public final void setCookieJar$okhttp(CookieJar p0) {}
-
-        public final void setDispatcher$okhttp(Dispatcher p0) {}
-
-        public final void setDns$okhttp(Dns p0) {}
-
-        public final void setEventListenerFactory$okhttp(EventListener.Factory p0) {}
-
-        public final void setFollowRedirects$okhttp(boolean p0) {}
-
-        public final void setFollowSslRedirects$okhttp(boolean p0) {}
-
-        public final void setHostnameVerifier$okhttp(HostnameVerifier p0) {}
-
-        public final void setMinWebSocketMessageToCompress$okhttp(long p0) {}
-
-        public final void setPingInterval$okhttp(int p0) {}
-
-        public final void setProtocols$okhttp(List<? extends Protocol> p0) {}
-
-        public final void setProxy$okhttp(Proxy p0) {}
-
-        public final void setProxyAuthenticator$okhttp(Authenticator p0) {}
-
-        public final void setProxySelector$okhttp(ProxySelector p0) {}
-
-        public final void setReadTimeout$okhttp(int p0) {}
-
-        public final void setRetryOnConnectionFailure$okhttp(boolean p0) {}
-
-        public final void setRouteDatabase$okhttp(RouteDatabase p0) {}
-
-        public final void setSocketFactory$okhttp(SocketFactory p0) {}
-
-        public final void setSslSocketFactoryOrNull$okhttp(SSLSocketFactory p0) {}
-
-        public final void setWriteTimeout$okhttp(int p0) {}
-
-        public final void setX509TrustManagerOrNull$okhttp(X509TrustManager p0) {}
+    static public class Builder
+    {
+        public Builder(){}
+        public Builder(OkHttpClient p0){}
+        public final Authenticator getAuthenticator$okhttp(){ return null; }
+        public final Authenticator getProxyAuthenticator$okhttp(){ return null; }
+        public final Cache getCache$okhttp(){ return null; }
+        public final CertificateChainCleaner getCertificateChainCleaner$okhttp(){ return null; }
+        public final CertificatePinner getCertificatePinner$okhttp(){ return null; }
+        public final ConnectionPool getConnectionPool$okhttp(){ return null; }
+        public final CookieJar getCookieJar$okhttp(){ return null; }
+        public final Dispatcher getDispatcher$okhttp(){ return null; }
+        public final Dns getDns$okhttp(){ return null; }
+        public final EventListener.Factory getEventListenerFactory$okhttp(){ return null; }
+        public final HostnameVerifier getHostnameVerifier$okhttp(){ return null; }
+        public final List<ConnectionSpec> getConnectionSpecs$okhttp(){ return null; }
+        public final List<Interceptor> getInterceptors$okhttp(){ return null; }
+        public final List<Interceptor> getNetworkInterceptors$okhttp(){ return null; }
+        public final List<Interceptor> interceptors(){ return null; }
+        public final List<Interceptor> networkInterceptors(){ return null; }
+        public final List<Protocol> getProtocols$okhttp(){ return null; }
+        public final OkHttpClient build(){ return null; }
+        public final OkHttpClient.Builder addInterceptor(Interceptor p0){ return null; }
+        public final OkHttpClient.Builder addNetworkInterceptor(Interceptor p0){ return null; }
+        public final OkHttpClient.Builder authenticator(Authenticator p0){ return null; }
+        public final OkHttpClient.Builder cache(Cache p0){ return null; }
+        public final OkHttpClient.Builder callTimeout(Duration p0){ return null; }
+        public final OkHttpClient.Builder callTimeout(long p0, TimeUnit p1){ return null; }
+        public final OkHttpClient.Builder certificatePinner(CertificatePinner p0){ return null; }
+        public final OkHttpClient.Builder connectTimeout(Duration p0){ return null; }
+        public final OkHttpClient.Builder connectTimeout(long p0, TimeUnit p1){ return null; }
+        public final OkHttpClient.Builder connectionPool(ConnectionPool p0){ return null; }
+        public final OkHttpClient.Builder connectionSpecs(List<ConnectionSpec> p0){ return null; }
+        public final OkHttpClient.Builder cookieJar(CookieJar p0){ return null; }
+        public final OkHttpClient.Builder dispatcher(Dispatcher p0){ return null; }
+        public final OkHttpClient.Builder dns(Dns p0){ return null; }
+        public final OkHttpClient.Builder eventListener(EventListener p0){ return null; }
+        public final OkHttpClient.Builder eventListenerFactory(EventListener.Factory p0){ return null; }
+        public final OkHttpClient.Builder followRedirects(boolean p0){ return null; }
+        public final OkHttpClient.Builder followSslRedirects(boolean p0){ return null; }
+        public final OkHttpClient.Builder hostnameVerifier(HostnameVerifier p0){ return null; }
+        public final OkHttpClient.Builder minWebSocketMessageToCompress(long p0){ return null; }
+        public final OkHttpClient.Builder pingInterval(Duration p0){ return null; }
+        public final OkHttpClient.Builder pingInterval(long p0, TimeUnit p1){ return null; }
+        public final OkHttpClient.Builder protocols(List<? extends Protocol> p0){ return null; }
+        public final OkHttpClient.Builder proxy(Proxy p0){ return null; }
+        public final OkHttpClient.Builder proxyAuthenticator(Authenticator p0){ return null; }
+        public final OkHttpClient.Builder proxySelector(ProxySelector p0){ return null; }
+        public final OkHttpClient.Builder readTimeout(Duration p0){ return null; }
+        public final OkHttpClient.Builder readTimeout(long p0, TimeUnit p1){ return null; }
+        public final OkHttpClient.Builder retryOnConnectionFailure(boolean p0){ return null; }
+        public final OkHttpClient.Builder socketFactory(SocketFactory p0){ return null; }
+        public final OkHttpClient.Builder sslSocketFactory(SSLSocketFactory p0){ return null; }
+        public final OkHttpClient.Builder sslSocketFactory(SSLSocketFactory p0, X509TrustManager p1){ return null; }
+        public final OkHttpClient.Builder writeTimeout(Duration p0){ return null; }
+        public final OkHttpClient.Builder writeTimeout(long p0, TimeUnit p1){ return null; }
+        public final Proxy getProxy$okhttp(){ return null; }
+        public final ProxySelector getProxySelector$okhttp(){ return null; }
+        public final RouteDatabase getRouteDatabase$okhttp(){ return null; }
+        public final SSLSocketFactory getSslSocketFactoryOrNull$okhttp(){ return null; }
+        public final SocketFactory getSocketFactory$okhttp(){ return null; }
+        public final X509TrustManager getX509TrustManagerOrNull$okhttp(){ return null; }
+        public final boolean getFollowRedirects$okhttp(){ return false; }
+        public final boolean getFollowSslRedirects$okhttp(){ return false; }
+        public final boolean getRetryOnConnectionFailure$okhttp(){ return false; }
+        public final int getCallTimeout$okhttp(){ return 0; }
+        public final int getConnectTimeout$okhttp(){ return 0; }
+        public final int getPingInterval$okhttp(){ return 0; }
+        public final int getReadTimeout$okhttp(){ return 0; }
+        public final int getWriteTimeout$okhttp(){ return 0; }
+        public final long getMinWebSocketMessageToCompress$okhttp(){ return 0; }
+        public final void setAuthenticator$okhttp(Authenticator p0){}
+        public final void setCache$okhttp(Cache p0){}
+        public final void setCallTimeout$okhttp(int p0){}
+        public final void setCertificateChainCleaner$okhttp(CertificateChainCleaner p0){}
+        public final void setCertificatePinner$okhttp(CertificatePinner p0){}
+        public final void setConnectTimeout$okhttp(int p0){}
+        public final void setConnectionPool$okhttp(ConnectionPool p0){}
+        public final void setConnectionSpecs$okhttp(List<ConnectionSpec> p0){}
+        public final void setCookieJar$okhttp(CookieJar p0){}
+        public final void setDispatcher$okhttp(Dispatcher p0){}
+        public final void setDns$okhttp(Dns p0){}
+        public final void setEventListenerFactory$okhttp(EventListener.Factory p0){}
+        public final void setFollowRedirects$okhttp(boolean p0){}
+        public final void setFollowSslRedirects$okhttp(boolean p0){}
+        public final void setHostnameVerifier$okhttp(HostnameVerifier p0){}
+        public final void setMinWebSocketMessageToCompress$okhttp(long p0){}
+        public final void setPingInterval$okhttp(int p0){}
+        public final void setProtocols$okhttp(List<? extends Protocol> p0){}
+        public final void setProxy$okhttp(Proxy p0){}
+        public final void setProxyAuthenticator$okhttp(Authenticator p0){}
+        public final void setProxySelector$okhttp(ProxySelector p0){}
+        public final void setReadTimeout$okhttp(int p0){}
+        public final void setRetryOnConnectionFailure$okhttp(boolean p0){}
+        public final void setRouteDatabase$okhttp(RouteDatabase p0){}
+        public final void setSocketFactory$okhttp(SocketFactory p0){}
+        public final void setSslSocketFactoryOrNull$okhttp(SSLSocketFactory p0){}
+        public final void setWriteTimeout$okhttp(int p0){}
+        public final void setX509TrustManagerOrNull$okhttp(X509TrustManager p0){}
     }
-    static public class Companion {
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final List<ConnectionSpec> getDEFAULT_CONNECTION_SPECS$okhttp() {
-            return null;
-        }
-
-        public final List<Protocol> getDEFAULT_PROTOCOLS$okhttp() {
-            return null;
-        }
+        public final List<ConnectionSpec> getDEFAULT_CONNECTION_SPECS$okhttp(){ return null; }
+        public final List<Protocol> getDEFAULT_PROTOCOLS$okhttp(){ return null; }
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Request.java

@@ -10,173 +10,55 @@ import okhttp3.Headers;
 import okhttp3.HttpUrl;
 import okhttp3.RequestBody;
 
-public class Request {
+public class Request
+{
     protected Request() {}
-
-    public Request(HttpUrl p0, String p1, Headers p2, RequestBody p3,
-            Map<Class<? extends Object>, ? extends Object> p4) {}
-
-    public String toString() {
-        return null;
-    }
-
-    public final <T> T tag(Class<? extends T> p0) {
-        return null;
-    }
-
-    public final CacheControl cacheControl() {
-        return null;
-    }
-
-    public final Headers headers() {
-        return null;
-    }
-
-    public final HttpUrl url() {
-        return null;
-    }
-
-    public final List<String> headers(String p0) {
-        return null;
-    }
-
-    public final Map<Class<? extends Object>, Object> getTags$okhttp() {
-        return null;
-    }
-
-    public final Object tag() {
-        return null;
-    }
-
-    public final Request.Builder newBuilder() {
-        return null;
-    }
-
-    public final RequestBody body() {
-        return null;
-    }
-
-    public final String header(String p0) {
-        return null;
-    }
-
-    public final String method() {
-        return null;
-    }
-
-    public final boolean isHttps() {
-        return false;
-    }
-
-    static public class Builder {
-        public <T> Request.Builder tag(Class<? super T> p0, T p1) {
-            return null;
-        }
-
-        public Builder() {}
-
-        public Builder(Request p0) {}
-
-        public Request build() {
-            return null;
-        }
-
-        public Request.Builder addHeader(String p0, String p1) {
-            return null;
-        }
-
-        public Request.Builder cacheControl(CacheControl p0) {
-            return null;
-        }
-
-        public Request.Builder delete(RequestBody p0) {
-            return null;
-        }
-
-        public Request.Builder get() {
-            return null;
-        }
-
-        public Request.Builder head() {
-            return null;
-        }
-
-        public Request.Builder header(String p0, String p1) {
-            return null;
-        }
-
-        public Request.Builder headers(Headers p0) {
-            return null;
-        }
-
-        public Request.Builder method(String p0, RequestBody p1) {
-            return null;
-        }
-
-        public Request.Builder patch(RequestBody p0) {
-            return null;
-        }
-
-        public Request.Builder post(RequestBody p0) {
-            return null;
-        }
-
-        public Request.Builder put(RequestBody p0) {
-            return null;
-        }
-
-        public Request.Builder removeHeader(String p0) {
-            return null;
-        }
-
-        public Request.Builder tag(Object p0) {
-            return null;
-        }
-
-        public Request.Builder url(HttpUrl p0) {
-            return null;
-        }
-
-        public Request.Builder url(String p0) {
-            return null;
-        }
-
-        public Request.Builder url(URL p0) {
-            return null;
-        }
-
-        public final Headers.Builder getHeaders$okhttp() {
-            return null;
-        }
-
-        public final HttpUrl getUrl$okhttp() {
-            return null;
-        }
-
-        public final Map<Class<? extends Object>, Object> getTags$okhttp() {
-            return null;
-        }
-
-        public final Request.Builder delete() {
-            return null;
-        }
-
-        public final RequestBody getBody$okhttp() {
-            return null;
-        }
-
-        public final String getMethod$okhttp() {
-            return null;
-        }
-
-        public final void setBody$okhttp(RequestBody p0) {}
-
-        public final void setHeaders$okhttp(Headers.Builder p0) {}
-
-        public final void setMethod$okhttp(String p0) {}
-
-        public final void setTags$okhttp(Map<Class<? extends Object>, Object> p0) {}
-
-        public final void setUrl$okhttp(HttpUrl p0) {}
+    public Request(HttpUrl p0, String p1, Headers p2, RequestBody p3, Map<Class<? extends Object>, ? extends Object> p4){}
+    public String toString(){ return null; }
+    public final <T> T tag(Class<? extends T> p0){ return null; }
+    public final CacheControl cacheControl(){ return null; }
+    public final Headers headers(){ return null; }
+    public final HttpUrl url(){ return null; }
+    public final List<String> headers(String p0){ return null; }
+    public final Map<Class<? extends Object>, Object> getTags$okhttp(){ return null; }
+    public final Object tag(){ return null; }
+    public final Request.Builder newBuilder(){ return null; }
+    public final RequestBody body(){ return null; }
+    public final String header(String p0){ return null; }
+    public final String method(){ return null; }
+    public final boolean isHttps(){ return false; }
+    static public class Builder
+    {
+        public <T> Request.Builder tag(Class<? super T> p0, T p1){ return null; }
+        public Builder(){}
+        public Builder(Request p0){}
+        public Request build(){ return null; }
+        public Request.Builder addHeader(String p0, String p1){ return null; }
+        public Request.Builder cacheControl(CacheControl p0){ return null; }
+        public Request.Builder delete(RequestBody p0){ return null; }
+        public Request.Builder get(){ return null; }
+        public Request.Builder head(){ return null; }
+        public Request.Builder header(String p0, String p1){ return null; }
+        public Request.Builder headers(Headers p0){ return null; }
+        public Request.Builder method(String p0, RequestBody p1){ return null; }
+        public Request.Builder patch(RequestBody p0){ return null; }
+        public Request.Builder post(RequestBody p0){ return null; }
+        public Request.Builder put(RequestBody p0){ return null; }
+        public Request.Builder removeHeader(String p0){ return null; }
+        public Request.Builder tag(Object p0){ return null; }
+        public Request.Builder url(HttpUrl p0){ return null; }
+        public Request.Builder url(String p0){ return null; }
+        public Request.Builder url(URL p0){ return null; }
+        public final Headers.Builder getHeaders$okhttp(){ return null; }
+        public final HttpUrl getUrl$okhttp(){ return null; }
+        public final Map<Class<? extends Object>, Object> getTags$okhttp(){ return null; }
+        public final Request.Builder delete(){ return null; }
+        public final RequestBody getBody$okhttp(){ return null; }
+        public final String getMethod$okhttp(){ return null; }
+        public final void setBody$okhttp(RequestBody p0){}
+        public final void setHeaders$okhttp(Headers.Builder p0){}
+        public final void setMethod$okhttp(String p0){}
+        public final void setTags$okhttp(Map<Class<? extends Object>, Object> p0){}
+        public final void setUrl$okhttp(HttpUrl p0){}
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Response.java

@@ -13,258 +13,81 @@ import okhttp3.Request;
 import okhttp3.ResponseBody;
 import okhttp3.internal.connection.Exchange;
 
-public class Response implements Closeable {
+public class Response implements Closeable
+{
     protected Response() {}
-
-    public Response(Request p0, Protocol p1, String p2, int p3, Handshake p4, Headers p5,
-            ResponseBody p6, Response p7, Response p8, Response p9, long p10, long p11,
-            Exchange p12) {}
-
-    public String toString() {
-        return null;
-    }
-
-    public final CacheControl cacheControl() {
-        return null;
-    }
-
-    public final Exchange exchange() {
-        return null;
-    }
-
-    public final Handshake handshake() {
-        return null;
-    }
-
-    public final Headers headers() {
-        return null;
-    }
-
-    public final Headers trailers() {
-        return null;
-    }
-
-    public final List<Challenge> challenges() {
-        return null;
-    }
-
-    public final List<String> headers(String p0) {
-        return null;
-    }
-
-    public final Protocol protocol() {
-        return null;
-    }
-
-    public final Request request() {
-        return null;
-    }
-
-    public final Response cacheResponse() {
-        return null;
-    }
-
-    public final Response networkResponse() {
-        return null;
-    }
-
-    public final Response priorResponse() {
-        return null;
-    }
-
-    public final Response.Builder newBuilder() {
-        return null;
-    }
-
-    public final ResponseBody body() {
-        return null;
-    }
-
-    public final ResponseBody peekBody(long p0) {
-        return null;
-    }
-
-    public final String header(String p0) {
-        return null;
-    }
-
-    public final String header(String p0, String p1) {
-        return null;
-    }
-
-    public final String message() {
-        return null;
-    }
-
-    public final boolean isRedirect() {
-        return false;
-    }
-
-    public final boolean isSuccessful() {
-        return false;
-    }
-
-    public final int code() {
-        return 0;
-    }
-
-    public final long receivedResponseAtMillis() {
-        return 0;
-    }
-
-    public final long sentRequestAtMillis() {
-        return 0;
-    }
-
-    public void close() {}
-
-    static public class Builder {
-        public Builder() {}
-
-        public Builder(Response p0) {}
-
-        public Response build() {
-            return null;
-        }
-
-        public Response.Builder addHeader(String p0, String p1) {
-            return null;
-        }
-
-        public Response.Builder body(ResponseBody p0) {
-            return null;
-        }
-
-        public Response.Builder cacheResponse(Response p0) {
-            return null;
-        }
-
-        public Response.Builder code(int p0) {
-            return null;
-        }
-
-        public Response.Builder handshake(Handshake p0) {
-            return null;
-        }
-
-        public Response.Builder header(String p0, String p1) {
-            return null;
-        }
-
-        public Response.Builder headers(Headers p0) {
-            return null;
-        }
-
-        public Response.Builder message(String p0) {
-            return null;
-        }
-
-        public Response.Builder networkResponse(Response p0) {
-            return null;
-        }
-
-        public Response.Builder priorResponse(Response p0) {
-            return null;
-        }
-
-        public Response.Builder protocol(Protocol p0) {
-            return null;
-        }
-
-        public Response.Builder receivedResponseAtMillis(long p0) {
-            return null;
-        }
-
-        public Response.Builder removeHeader(String p0) {
-            return null;
-        }
-
-        public Response.Builder request(Request p0) {
-            return null;
-        }
-
-        public Response.Builder sentRequestAtMillis(long p0) {
-            return null;
-        }
-
-        public final Exchange getExchange$okhttp() {
-            return null;
-        }
-
-        public final Handshake getHandshake$okhttp() {
-            return null;
-        }
-
-        public final Headers.Builder getHeaders$okhttp() {
-            return null;
-        }
-
-        public final Protocol getProtocol$okhttp() {
-            return null;
-        }
-
-        public final Request getRequest$okhttp() {
-            return null;
-        }
-
-        public final Response getCacheResponse$okhttp() {
-            return null;
-        }
-
-        public final Response getNetworkResponse$okhttp() {
-            return null;
-        }
-
-        public final Response getPriorResponse$okhttp() {
-            return null;
-        }
-
-        public final ResponseBody getBody$okhttp() {
-            return null;
-        }
-
-        public final String getMessage$okhttp() {
-            return null;
-        }
-
-        public final int getCode$okhttp() {
-            return 0;
-        }
-
-        public final long getReceivedResponseAtMillis$okhttp() {
-            return 0;
-        }
-
-        public final long getSentRequestAtMillis$okhttp() {
-            return 0;
-        }
-
-        public final void initExchange$okhttp(Exchange p0) {}
-
-        public final void setBody$okhttp(ResponseBody p0) {}
-
-        public final void setCacheResponse$okhttp(Response p0) {}
-
-        public final void setCode$okhttp(int p0) {}
-
-        public final void setExchange$okhttp(Exchange p0) {}
-
-        public final void setHandshake$okhttp(Handshake p0) {}
-
-        public final void setHeaders$okhttp(Headers.Builder p0) {}
-
-        public final void setMessage$okhttp(String p0) {}
-
-        public final void setNetworkResponse$okhttp(Response p0) {}
-
-        public final void setPriorResponse$okhttp(Response p0) {}
-
-        public final void setProtocol$okhttp(Protocol p0) {}
-
-        public final void setReceivedResponseAtMillis$okhttp(long p0) {}
-
-        public final void setRequest$okhttp(Request p0) {}
-
-        public final void setSentRequestAtMillis$okhttp(long p0) {}
+    public Response(Request p0, Protocol p1, String p2, int p3, Handshake p4, Headers p5, ResponseBody p6, Response p7, Response p8, Response p9, long p10, long p11, Exchange p12){}
+    public String toString(){ return null; }
+    public final CacheControl cacheControl(){ return null; }
+    public final Exchange exchange(){ return null; }
+    public final Handshake handshake(){ return null; }
+    public final Headers headers(){ return null; }
+    public final Headers trailers(){ return null; }
+    public final List<Challenge> challenges(){ return null; }
+    public final List<String> headers(String p0){ return null; }
+    public final Protocol protocol(){ return null; }
+    public final Request request(){ return null; }
+    public final Response cacheResponse(){ return null; }
+    public final Response networkResponse(){ return null; }
+    public final Response priorResponse(){ return null; }
+    public final Response.Builder newBuilder(){ return null; }
+    public final ResponseBody body(){ return null; }
+    public final ResponseBody peekBody(long p0){ return null; }
+    public final String header(String p0){ return null; }
+    public final String header(String p0, String p1){ return null; }
+    public final String message(){ return null; }
+    public final boolean isRedirect(){ return false; }
+    public final boolean isSuccessful(){ return false; }
+    public final int code(){ return 0; }
+    public final long receivedResponseAtMillis(){ return 0; }
+    public final long sentRequestAtMillis(){ return 0; }
+    public void close(){}
+    static public class Builder
+    {
+        public Builder(){}
+        public Builder(Response p0){}
+        public Response build(){ return null; }
+        public Response.Builder addHeader(String p0, String p1){ return null; }
+        public Response.Builder body(ResponseBody p0){ return null; }
+        public Response.Builder cacheResponse(Response p0){ return null; }
+        public Response.Builder code(int p0){ return null; }
+        public Response.Builder handshake(Handshake p0){ return null; }
+        public Response.Builder header(String p0, String p1){ return null; }
+        public Response.Builder headers(Headers p0){ return null; }
+        public Response.Builder message(String p0){ return null; }
+        public Response.Builder networkResponse(Response p0){ return null; }
+        public Response.Builder priorResponse(Response p0){ return null; }
+        public Response.Builder protocol(Protocol p0){ return null; }
+        public Response.Builder receivedResponseAtMillis(long p0){ return null; }
+        public Response.Builder removeHeader(String p0){ return null; }
+        public Response.Builder request(Request p0){ return null; }
+        public Response.Builder sentRequestAtMillis(long p0){ return null; }
+        public final Exchange getExchange$okhttp(){ return null; }
+        public final Handshake getHandshake$okhttp(){ return null; }
+        public final Headers.Builder getHeaders$okhttp(){ return null; }
+        public final Protocol getProtocol$okhttp(){ return null; }
+        public final Request getRequest$okhttp(){ return null; }
+        public final Response getCacheResponse$okhttp(){ return null; }
+        public final Response getNetworkResponse$okhttp(){ return null; }
+        public final Response getPriorResponse$okhttp(){ return null; }
+        public final ResponseBody getBody$okhttp(){ return null; }
+        public final String getMessage$okhttp(){ return null; }
+        public final int getCode$okhttp(){ return 0; }
+        public final long getReceivedResponseAtMillis$okhttp(){ return 0; }
+        public final long getSentRequestAtMillis$okhttp(){ return 0; }
+        public final void initExchange$okhttp(Exchange p0){}
+        public final void setBody$okhttp(ResponseBody p0){}
+        public final void setCacheResponse$okhttp(Response p0){}
+        public final void setCode$okhttp(int p0){}
+        public final void setExchange$okhttp(Exchange p0){}
+        public final void setHandshake$okhttp(Handshake p0){}
+        public final void setHeaders$okhttp(Headers.Builder p0){}
+        public final void setMessage$okhttp(String p0){}
+        public final void setNetworkResponse$okhttp(Response p0){}
+        public final void setPriorResponse$okhttp(Response p0){}
+        public final void setProtocol$okhttp(Protocol p0){}
+        public final void setReceivedResponseAtMillis$okhttp(long p0){}
+        public final void setRequest$okhttp(Request p0){}
+        public final void setSentRequestAtMillis$okhttp(long p0){}
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/Route.java

@@ -6,36 +6,15 @@ import java.net.InetSocketAddress;
 import java.net.Proxy;
 import okhttp3.Address;
 
-public class Route {
+public class Route
+{
     protected Route() {}
-
-    public Route(Address p0, Proxy p1, InetSocketAddress p2) {}
-
-    public String toString() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public final Address address() {
-        return null;
-    }
-
-    public final InetSocketAddress socketAddress() {
-        return null;
-    }
-
-    public final Proxy proxy() {
-        return null;
-    }
-
-    public final boolean requiresTunnel() {
-        return false;
-    }
-
-    public int hashCode() {
-        return 0;
-    }
+    public Route(Address p0, Proxy p1, InetSocketAddress p2){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final Address address(){ return null; }
+    public final InetSocketAddress socketAddress(){ return null; }
+    public final Proxy proxy(){ return null; }
+    public final boolean requiresTunnel(){ return false; }
+    public int hashCode(){ return 0; }
 }

java/ql/test/stubs/okhttp-4.9.3/okhttp3/TlsVersion.java

@@ -3,26 +3,16 @@
 package okhttp3;
 
 
-public enum TlsVersion {
+public enum TlsVersion
+{
     SSL_3_0, TLS_1_0, TLS_1_1, TLS_1_2, TLS_1_3;
-
     private TlsVersion() {}
-
-    public final String javaName() {
-        return null;
-    }
-
-    public static TlsVersion forJavaName(String p0) {
-        return null;
-    }
-
+    public final String javaName(){ return null; }
+    public static TlsVersion forJavaName(String p0){ return null; }
     public static TlsVersion.Companion Companion = null;
-
-    static public class Companion {
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final TlsVersion forJavaName(String p0) {
-            return null;
-        }
+        public final TlsVersion forJavaName(String p0){ return null; }
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okio/Buffer.java

@@ -17,453 +17,131 @@ import okio.Sink;
 import okio.Source;
 import okio.Timeout;
 
-public class Buffer implements BufferedSink, BufferedSource, ByteChannel, Cloneable {
-    public Buffer buffer() {
-        return null;
-    }
-
-    public Buffer clone() {
-        return null;
-    }
-
-    public Buffer emit() {
-        return null;
-    }
-
-    public Buffer emitCompleteSegments() {
-        return null;
-    }
-
-    public Buffer getBuffer() {
-        return null;
-    }
-
-    public Buffer write(ByteString p0) {
-        return null;
-    }
-
-    public Buffer write(ByteString p0, int p1, int p2) {
-        return null;
-    }
-
-    public Buffer write(Source p0, long p1) {
-        return null;
-    }
-
-    public Buffer write(byte[] p0) {
-        return null;
-    }
-
-    public Buffer write(byte[] p0, int p1, int p2) {
-        return null;
-    }
-
-    public Buffer writeByte(int p0) {
-        return null;
-    }
-
-    public Buffer writeDecimalLong(long p0) {
-        return null;
-    }
-
-    public Buffer writeHexadecimalUnsignedLong(long p0) {
-        return null;
-    }
-
-    public Buffer writeInt(int p0) {
-        return null;
-    }
-
-    public Buffer writeIntLe(int p0) {
-        return null;
-    }
-
-    public Buffer writeLong(long p0) {
-        return null;
-    }
-
-    public Buffer writeLongLe(long p0) {
-        return null;
-    }
-
-    public Buffer writeShort(int p0) {
-        return null;
-    }
-
-    public Buffer writeShortLe(int p0) {
-        return null;
-    }
-
-    public Buffer writeString(String p0, Charset p1) {
-        return null;
-    }
-
-    public Buffer writeString(String p0, int p1, int p2, Charset p3) {
-        return null;
-    }
-
-    public Buffer writeUtf8(String p0) {
-        return null;
-    }
-
-    public Buffer writeUtf8(String p0, int p1, int p2) {
-        return null;
-    }
-
-    public Buffer writeUtf8CodePoint(int p0) {
-        return null;
-    }
-
-    public Buffer() {}
-
-    public BufferedSource peek() {
-        return null;
-    }
-
-    public ByteString readByteString() {
-        return null;
-    }
-
-    public ByteString readByteString(long p0) {
-        return null;
-    }
-
-    public InputStream inputStream() {
-        return null;
-    }
-
-    public OutputStream outputStream() {
-        return null;
-    }
-
+public class Buffer implements BufferedSink, BufferedSource, ByteChannel, Cloneable
+{
+    public Buffer buffer(){ return null; }
+    public Buffer clone(){ return null; }
+    public Buffer emit(){ return null; }
+    public Buffer emitCompleteSegments(){ return null; }
+    public Buffer getBuffer(){ return null; }
+    public Buffer write(ByteString p0){ return null; }
+    public Buffer write(ByteString p0, int p1, int p2){ return null; }
+    public Buffer write(Source p0, long p1){ return null; }
+    public Buffer write(byte[] p0){ return null; }
+    public Buffer write(byte[] p0, int p1, int p2){ return null; }
+    public Buffer writeByte(int p0){ return null; }
+    public Buffer writeDecimalLong(long p0){ return null; }
+    public Buffer writeHexadecimalUnsignedLong(long p0){ return null; }
+    public Buffer writeInt(int p0){ return null; }
+    public Buffer writeIntLe(int p0){ return null; }
+    public Buffer writeLong(long p0){ return null; }
+    public Buffer writeLongLe(long p0){ return null; }
+    public Buffer writeShort(int p0){ return null; }
+    public Buffer writeShortLe(int p0){ return null; }
+    public Buffer writeString(String p0, Charset p1){ return null; }
+    public Buffer writeString(String p0, int p1, int p2, Charset p3){ return null; }
+    public Buffer writeUtf8(String p0){ return null; }
+    public Buffer writeUtf8(String p0, int p1, int p2){ return null; }
+    public Buffer writeUtf8CodePoint(int p0){ return null; }
+    public Buffer(){}
+    public BufferedSource peek(){ return null; }
+    public ByteString readByteString(){ return null; }
+    public ByteString readByteString(long p0){ return null; }
+    public InputStream inputStream(){ return null; }
+    public OutputStream outputStream(){ return null; }
     public Segment head = null;
-
-    public String readString(Charset p0) {
-        return null;
-    }
-
-    public String readString(long p0, Charset p1) {
-        return null;
-    }
-
-    public String readUtf8() {
-        return null;
-    }
-
-    public String readUtf8(long p0) {
-        return null;
-    }
-
-    public String readUtf8Line() {
-        return null;
-    }
-
-    public String readUtf8LineStrict() {
-        return null;
-    }
-
-    public String readUtf8LineStrict(long p0) {
-        return null;
-    }
-
-    public String toString() {
-        return null;
-    }
-
-    public Timeout timeout() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public boolean exhausted() {
-        return false;
-    }
-
-    public boolean isOpen() {
-        return false;
-    }
-
-    public boolean rangeEquals(long p0, ByteString p1) {
-        return false;
-    }
-
-    public boolean rangeEquals(long p0, ByteString p1, int p2, int p3) {
-        return false;
-    }
-
-    public boolean request(long p0) {
-        return false;
-    }
-
-    public byte readByte() {
-        return 0;
-    }
-
-    public byte[] readByteArray() {
-        return null;
-    }
-
-    public byte[] readByteArray(long p0) {
-        return null;
-    }
-
-    public final Buffer copy() {
-        return null;
-    }
-
-    public final Buffer copyTo(Buffer p0, long p1) {
-        return null;
-    }
-
-    public final Buffer copyTo(Buffer p0, long p1, long p2) {
-        return null;
-    }
-
-    public final Buffer copyTo(OutputStream p0) {
-        return null;
-    }
-
-    public final Buffer copyTo(OutputStream p0, long p1) {
-        return null;
-    }
-
-    public final Buffer copyTo(OutputStream p0, long p1, long p2) {
-        return null;
-    }
-
-    public final Buffer readFrom(InputStream p0) {
-        return null;
-    }
-
-    public final Buffer readFrom(InputStream p0, long p1) {
-        return null;
-    }
-
-    public final Buffer writeTo(OutputStream p0) {
-        return null;
-    }
-
-    public final Buffer writeTo(OutputStream p0, long p1) {
-        return null;
-    }
-
-    public final Buffer.UnsafeCursor readAndWriteUnsafe() {
-        return null;
-    }
-
-    public final Buffer.UnsafeCursor readAndWriteUnsafe(Buffer.UnsafeCursor p0) {
-        return null;
-    }
-
-    public final Buffer.UnsafeCursor readUnsafe() {
-        return null;
-    }
-
-    public final Buffer.UnsafeCursor readUnsafe(Buffer.UnsafeCursor p0) {
-        return null;
-    }
-
-    public final ByteString hmacSha1(ByteString p0) {
-        return null;
-    }
-
-    public final ByteString hmacSha256(ByteString p0) {
-        return null;
-    }
-
-    public final ByteString hmacSha512(ByteString p0) {
-        return null;
-    }
-
-    public final ByteString md5() {
-        return null;
-    }
-
-    public final ByteString sha1() {
-        return null;
-    }
-
-    public final ByteString sha256() {
-        return null;
-    }
-
-    public final ByteString sha512() {
-        return null;
-    }
-
-    public final ByteString snapshot() {
-        return null;
-    }
-
-    public final ByteString snapshot(int p0) {
-        return null;
-    }
-
-    public final Segment writableSegment$okio(int p0) {
-        return null;
-    }
-
-    public final byte getByte(long p0) {
-        return 0;
-    }
-
-    public final long completeSegmentByteCount() {
-        return 0;
-    }
-
-    public final long size() {
-        return 0;
-    }
-
-    public final void clear() {}
-
-    public final void setSize$okio(long p0) {}
-
-    public int hashCode() {
-        return 0;
-    }
-
-    public int read(ByteBuffer p0) {
-        return 0;
-    }
-
-    public int read(byte[] p0) {
-        return 0;
-    }
-
-    public int read(byte[] p0, int p1, int p2) {
-        return 0;
-    }
-
-    public int readInt() {
-        return 0;
-    }
-
-    public int readIntLe() {
-        return 0;
-    }
-
-    public int readUtf8CodePoint() {
-        return 0;
-    }
-
-    public int select(Options p0) {
-        return 0;
-    }
-
-    public int write(ByteBuffer p0) {
-        return 0;
-    }
-
-    public long indexOf(ByteString p0) {
-        return 0;
-    }
-
-    public long indexOf(ByteString p0, long p1) {
-        return 0;
-    }
-
-    public long indexOf(byte p0) {
-        return 0;
-    }
-
-    public long indexOf(byte p0, long p1) {
-        return 0;
-    }
-
-    public long indexOf(byte p0, long p1, long p2) {
-        return 0;
-    }
-
-    public long indexOfElement(ByteString p0) {
-        return 0;
-    }
-
-    public long indexOfElement(ByteString p0, long p1) {
-        return 0;
-    }
-
-    public long read(Buffer p0, long p1) {
-        return 0;
-    }
-
-    public long readAll(Sink p0) {
-        return 0;
-    }
-
-    public long readDecimalLong() {
-        return 0;
-    }
-
-    public long readHexadecimalUnsignedLong() {
-        return 0;
-    }
-
-    public long readLong() {
-        return 0;
-    }
-
-    public long readLongLe() {
-        return 0;
-    }
-
-    public long writeAll(Source p0) {
-        return 0;
-    }
-
-    public short readShort() {
-        return 0;
-    }
-
-    public short readShortLe() {
-        return 0;
-    }
-
-    public void close() {}
-
-    public void flush() {}
-
-    public void readFully(Buffer p0, long p1) {}
-
-    public void readFully(byte[] p0) {}
-
-    public void require(long p0) {}
-
-    public void skip(long p0) {}
-
-    public void write(Buffer p0, long p1) {}
-
-    static public class UnsafeCursor implements Closeable {
+    public String readString(Charset p0){ return null; }
+    public String readString(long p0, Charset p1){ return null; }
+    public String readUtf8(){ return null; }
+    public String readUtf8(long p0){ return null; }
+    public String readUtf8Line(){ return null; }
+    public String readUtf8LineStrict(){ return null; }
+    public String readUtf8LineStrict(long p0){ return null; }
+    public String toString(){ return null; }
+    public Timeout timeout(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public boolean exhausted(){ return false; }
+    public boolean isOpen(){ return false; }
+    public boolean rangeEquals(long p0, ByteString p1){ return false; }
+    public boolean rangeEquals(long p0, ByteString p1, int p2, int p3){ return false; }
+    public boolean request(long p0){ return false; }
+    public byte readByte(){ return 0; }
+    public byte[] readByteArray(){ return null; }
+    public byte[] readByteArray(long p0){ return null; }
+    public final Buffer copy(){ return null; }
+    public final Buffer copyTo(Buffer p0, long p1){ return null; }
+    public final Buffer copyTo(Buffer p0, long p1, long p2){ return null; }
+    public final Buffer copyTo(OutputStream p0){ return null; }
+    public final Buffer copyTo(OutputStream p0, long p1){ return null; }
+    public final Buffer copyTo(OutputStream p0, long p1, long p2){ return null; }
+    public final Buffer readFrom(InputStream p0){ return null; }
+    public final Buffer readFrom(InputStream p0, long p1){ return null; }
+    public final Buffer writeTo(OutputStream p0){ return null; }
+    public final Buffer writeTo(OutputStream p0, long p1){ return null; }
+    public final Buffer.UnsafeCursor readAndWriteUnsafe(){ return null; }
+    public final Buffer.UnsafeCursor readAndWriteUnsafe(Buffer.UnsafeCursor p0){ return null; }
+    public final Buffer.UnsafeCursor readUnsafe(){ return null; }
+    public final Buffer.UnsafeCursor readUnsafe(Buffer.UnsafeCursor p0){ return null; }
+    public final ByteString hmacSha1(ByteString p0){ return null; }
+    public final ByteString hmacSha256(ByteString p0){ return null; }
+    public final ByteString hmacSha512(ByteString p0){ return null; }
+    public final ByteString md5(){ return null; }
+    public final ByteString sha1(){ return null; }
+    public final ByteString sha256(){ return null; }
+    public final ByteString sha512(){ return null; }
+    public final ByteString snapshot(){ return null; }
+    public final ByteString snapshot(int p0){ return null; }
+    public final Segment writableSegment$okio(int p0){ return null; }
+    public final byte getByte(long p0){ return 0; }
+    public final long completeSegmentByteCount(){ return 0; }
+    public final long size(){ return 0; }
+    public final void clear(){}
+    public final void setSize$okio(long p0){}
+    public int hashCode(){ return 0; }
+    public int read(ByteBuffer p0){ return 0; }
+    public int read(byte[] p0){ return 0; }
+    public int read(byte[] p0, int p1, int p2){ return 0; }
+    public int readInt(){ return 0; }
+    public int readIntLe(){ return 0; }
+    public int readUtf8CodePoint(){ return 0; }
+    public int select(Options p0){ return 0; }
+    public int write(ByteBuffer p0){ return 0; }
+    public long indexOf(ByteString p0){ return 0; }
+    public long indexOf(ByteString p0, long p1){ return 0; }
+    public long indexOf(byte p0){ return 0; }
+    public long indexOf(byte p0, long p1){ return 0; }
+    public long indexOf(byte p0, long p1, long p2){ return 0; }
+    public long indexOfElement(ByteString p0){ return 0; }
+    public long indexOfElement(ByteString p0, long p1){ return 0; }
+    public long read(Buffer p0, long p1){ return 0; }
+    public long readAll(Sink p0){ return 0; }
+    public long readDecimalLong(){ return 0; }
+    public long readHexadecimalUnsignedLong(){ return 0; }
+    public long readLong(){ return 0; }
+    public long readLongLe(){ return 0; }
+    public long writeAll(Source p0){ return 0; }
+    public short readShort(){ return 0; }
+    public short readShortLe(){ return 0; }
+    public void close(){}
+    public void flush(){}
+    public void readFully(Buffer p0, long p1){}
+    public void readFully(byte[] p0){}
+    public void require(long p0){}
+    public void skip(long p0){}
+    public void write(Buffer p0, long p1){}
+    static public class UnsafeCursor implements Closeable
+    {
         public Buffer buffer = null;
-
-        public UnsafeCursor() {}
-
+        public UnsafeCursor(){}
         public boolean readWrite = false;
         public byte[] data = null;
-
-        public final int next() {
-            return 0;
-        }
-
-        public final int seek(long p0) {
-            return 0;
-        }
-
-        public final long expandBuffer(int p0) {
-            return 0;
-        }
-
-        public final long resizeBuffer(long p0) {
-            return 0;
-        }
-
+        public final int next(){ return 0; }
+        public final int seek(long p0){ return 0; }
+        public final long expandBuffer(int p0){ return 0; }
+        public final long resizeBuffer(long p0){ return 0; }
         public int end = 0;
         public int start = 0;
         public long offset = 0;
-
-        public void close() {}
+        public void close(){}
     }
 }

java/ql/test/stubs/okhttp-4.9.3/okio/ByteString.java

@@ -9,276 +9,81 @@ import java.nio.ByteBuffer;
 import java.nio.charset.Charset;
 import okio.Buffer;
 
-public class ByteString implements Comparable<ByteString>, Serializable {
+public class ByteString implements Comparable<ByteString>, Serializable
+{
     protected ByteString() {}
-
-    public ByteBuffer asByteBuffer() {
-        return null;
-    }
-
-    public ByteString digest$okio(String p0) {
-        return null;
-    }
-
-    public ByteString hmac$okio(String p0, ByteString p1) {
-        return null;
-    }
-
-    public ByteString hmacSha1(ByteString p0) {
-        return null;
-    }
-
-    public ByteString hmacSha256(ByteString p0) {
-        return null;
-    }
-
-    public ByteString hmacSha512(ByteString p0) {
-        return null;
-    }
-
-    public ByteString md5() {
-        return null;
-    }
-
-    public ByteString sha1() {
-        return null;
-    }
-
-    public ByteString sha256() {
-        return null;
-    }
-
-    public ByteString sha512() {
-        return null;
-    }
-
-    public ByteString substring(int p0, int p1) {
-        return null;
-    }
-
-    public ByteString toAsciiLowercase() {
-        return null;
-    }
-
-    public ByteString toAsciiUppercase() {
-        return null;
-    }
-
-    public ByteString(byte[] p0) {}
-
-    public String base64() {
-        return null;
-    }
-
-    public String base64Url() {
-        return null;
-    }
-
-    public String hex() {
-        return null;
-    }
-
-    public String string(Charset p0) {
-        return null;
-    }
-
-    public String toString() {
-        return null;
-    }
-
-    public String utf8() {
-        return null;
-    }
-
-    public boolean equals(Object p0) {
-        return false;
-    }
-
-    public boolean rangeEquals(int p0, ByteString p1, int p2, int p3) {
-        return false;
-    }
-
-    public boolean rangeEquals(int p0, byte[] p1, int p2, int p3) {
-        return false;
-    }
-
-    public byte internalGet$okio(int p0) {
-        return 0;
-    }
-
-    public byte[] internalArray$okio() {
-        return null;
-    }
-
-    public byte[] toByteArray() {
-        return null;
-    }
-
-    public final ByteString substring() {
-        return null;
-    }
-
-    public final ByteString substring(int p0) {
-        return null;
-    }
-
-    public final String getUtf8$okio() {
-        return null;
-    }
-
-    public final boolean endsWith(ByteString p0) {
-        return false;
-    }
-
-    public final boolean endsWith(byte[] p0) {
-        return false;
-    }
-
-    public final boolean startsWith(ByteString p0) {
-        return false;
-    }
-
-    public final boolean startsWith(byte[] p0) {
-        return false;
-    }
-
-    public final byte getByte(int p0) {
-        return 0;
-    }
-
-    public final byte[] getData$okio() {
-        return null;
-    }
-
-    public final int getHashCode$okio() {
-        return 0;
-    }
-
-    public final int indexOf(ByteString p0) {
-        return 0;
-    }
-
-    public final int indexOf(ByteString p0, int p1) {
-        return 0;
-    }
-
-    public final int indexOf(byte[] p0) {
-        return 0;
-    }
-
-    public final int lastIndexOf(ByteString p0) {
-        return 0;
-    }
-
-    public final int lastIndexOf(ByteString p0, int p1) {
-        return 0;
-    }
-
-    public final int lastIndexOf(byte[] p0) {
-        return 0;
-    }
-
-    public final int size() {
-        return 0;
-    }
-
-    public final void setHashCode$okio(int p0) {}
-
-    public final void setUtf8$okio(String p0) {}
-
-    public int compareTo(ByteString p0) {
-        return 0;
-    }
-
-    public int getSize$okio() {
-        return 0;
-    }
-
-    public int hashCode() {
-        return 0;
-    }
-
-    public int indexOf(byte[] p0, int p1) {
-        return 0;
-    }
-
-    public int lastIndexOf(byte[] p0, int p1) {
-        return 0;
-    }
-
+    public ByteBuffer asByteBuffer(){ return null; }
+    public ByteString digest$okio(String p0){ return null; }
+    public ByteString hmac$okio(String p0, ByteString p1){ return null; }
+    public ByteString hmacSha1(ByteString p0){ return null; }
+    public ByteString hmacSha256(ByteString p0){ return null; }
+    public ByteString hmacSha512(ByteString p0){ return null; }
+    public ByteString md5(){ return null; }
+    public ByteString sha1(){ return null; }
+    public ByteString sha256(){ return null; }
+    public ByteString sha512(){ return null; }
+    public ByteString substring(int p0, int p1){ return null; }
+    public ByteString toAsciiLowercase(){ return null; }
+    public ByteString toAsciiUppercase(){ return null; }
+    public ByteString(byte[] p0){}
+    public String base64(){ return null; }
+    public String base64Url(){ return null; }
+    public String hex(){ return null; }
+    public String string(Charset p0){ return null; }
+    public String toString(){ return null; }
+    public String utf8(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public boolean rangeEquals(int p0, ByteString p1, int p2, int p3){ return false; }
+    public boolean rangeEquals(int p0, byte[] p1, int p2, int p3){ return false; }
+    public byte internalGet$okio(int p0){ return 0; }
+    public byte[] internalArray$okio(){ return null; }
+    public byte[] toByteArray(){ return null; }
+    public final ByteString substring(){ return null; }
+    public final ByteString substring(int p0){ return null; }
+    public final String getUtf8$okio(){ return null; }
+    public final boolean endsWith(ByteString p0){ return false; }
+    public final boolean endsWith(byte[] p0){ return false; }
+    public final boolean startsWith(ByteString p0){ return false; }
+    public final boolean startsWith(byte[] p0){ return false; }
+    public final byte getByte(int p0){ return 0; }
+    public final byte[] getData$okio(){ return null; }
+    public final int getHashCode$okio(){ return 0; }
+    public final int indexOf(ByteString p0){ return 0; }
+    public final int indexOf(ByteString p0, int p1){ return 0; }
+    public final int indexOf(byte[] p0){ return 0; }
+    public final int lastIndexOf(ByteString p0){ return 0; }
+    public final int lastIndexOf(ByteString p0, int p1){ return 0; }
+    public final int lastIndexOf(byte[] p0){ return 0; }
+    public final int size(){ return 0; }
+    public final void setHashCode$okio(int p0){}
+    public final void setUtf8$okio(String p0){}
+    public int compareTo(ByteString p0){ return 0; }
+    public int getSize$okio(){ return 0; }
+    public int hashCode(){ return 0; }
+    public int indexOf(byte[] p0, int p1){ return 0; }
+    public int lastIndexOf(byte[] p0, int p1){ return 0; }
     public static ByteString EMPTY = null;
-
-    public static ByteString decodeBase64(String p0) {
-        return null;
-    }
-
-    public static ByteString decodeHex(String p0) {
-        return null;
-    }
-
-    public static ByteString encodeString(String p0, Charset p1) {
-        return null;
-    }
-
-    public static ByteString encodeUtf8(String p0) {
-        return null;
-    }
-
-    public static ByteString of(ByteBuffer p0) {
-        return null;
-    }
-
-    public static ByteString of(byte... p0) {
-        return null;
-    }
-
-    public static ByteString of(byte[] p0, int p1, int p2) {
-        return null;
-    }
-
-    public static ByteString read(InputStream p0, int p1) {
-        return null;
-    }
-
+    public static ByteString decodeBase64(String p0){ return null; }
+    public static ByteString decodeHex(String p0){ return null; }
+    public static ByteString encodeString(String p0, Charset p1){ return null; }
+    public static ByteString encodeUtf8(String p0){ return null; }
+    public static ByteString of(ByteBuffer p0){ return null; }
+    public static ByteString of(byte... p0){ return null; }
+    public static ByteString of(byte[] p0, int p1, int p2){ return null; }
+    public static ByteString read(InputStream p0, int p1){ return null; }
     public static ByteString.Companion Companion = null;
-
-    public void write$okio(Buffer p0, int p1, int p2) {}
-
-    public void write(OutputStream p0) {}
-
-    static public class Companion {
+    public void write$okio(Buffer p0, int p1, int p2){}
+    public void write(OutputStream p0){}
+    static public class Companion
+    {
         protected Companion() {}
-
-        public final ByteString decodeBase64(String p0) {
-            return null;
-        }
-
-        public final ByteString decodeHex(String p0) {
-            return null;
-        }
-
-        public final ByteString encodeString(String p0, Charset p1) {
-            return null;
-        }
-
-        public final ByteString encodeUtf8(String p0) {
-            return null;
-        }
-
-        public final ByteString of(ByteBuffer p0) {
-            return null;
-        }
-
-        public final ByteString of(byte... p0) {
-            return null;
-        }
-
-        public final ByteString of(byte[] p0, int p1, int p2) {
-            return null;
-        }
-
-        public final ByteString read(InputStream p0, int p1) {
-            return null;
-        }
+        public final ByteString decodeBase64(String p0){ return null; }
+        public final ByteString decodeHex(String p0){ return null; }
+        public final ByteString encodeString(String p0, Charset p1){ return null; }
+        public final ByteString encodeUtf8(String p0){ return null; }
+        public final ByteString of(ByteBuffer p0){ return null; }
+        public final ByteString of(byte... p0){ return null; }
+        public final ByteString of(byte[] p0, int p1, int p2){ return null; }
+        public final ByteString read(InputStream p0, int p1){ return null; }
     }
 }