hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Import UnsafeDeserializationQuery in unsafeDeserialization.ql

Browse Source
This commit is contained in:
Artem Smotrakov
2021-07-20 10:14:50 +02:00
parent 47e4cf4180
commit 158a75e5a1
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
java/ql/src/semmle/code/java/security/UnsafeDeserializationQuery.qll
View File

@@ -121,7 +121,10 @@ private class SafeKryo extends DataFlow2::Configuration {
}
}
private predicate unsafeDeserialization(MethodAccess ma, Expr sink) {
/**
* Holds if `ma` is a call that triggers deserialization with tainted data from `sink`.
*/
predicate unsafeDeserialization(MethodAccess ma, Expr sink) {
exists(Method m | m = ma.getMethod() |
m instanceof ObjectInputStreamReadObjectMethod and
sink = ma.getQualifier() and

2
java/ql/test/library-tests/UnsafeDeserialization/unsafeDeserialization.ql
View File

@@ -1,5 +1,5 @@
import default
import semmle.code.java.security.UnsafeDeserialization
import semmle.code.java.security.UnsafeDeserializationQuery
from Method m, MethodAccess ma
where ma.getMethod() = m and unsafeDeserialization(ma, _)