hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add models for flow- and taint-preserving functions in Commons ObjectUtils.

Browse Source 
These should all be value-preserving, but we don't support value-preserving varargs methods yet.
This commit is contained in:
Chris Smowton
2021-03-05 17:59:05 +00:00
parent 0edae89425
commit 1c1ca70027
5 changed files with 306 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/change-notes/2021-03-05-commons-object-utils.md Normal file
View File

@@ -0,0 +1,2 @@
lgtm,codescanning
* Add models for ObjectUtils functions in the Apache Commons-Lang library. This may lead to more results from any dataflow query where traversal of ObjectUtils functions means we can now complete a path from a source of tainted data to a corresponding sink.