From 2150af9732c1b0d48951d35ff1a6f1b71ad7b27b Mon Sep 17 00:00:00 2001 From: Anders Schack-Mulligen Date: Wed, 12 Dec 2018 14:57:50 +0000 Subject: [PATCH] Java: Add change note about CFG cast deprecation. --- change-notes/1.19/analysis-java.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/change-notes/1.19/analysis-java.md b/change-notes/1.19/analysis-java.md index 13b9366aada..db728a18473 100644 --- a/change-notes/1.19/analysis-java.md +++ b/change-notes/1.19/analysis-java.md @@ -26,6 +26,11 @@ to run queries and explore the data flow in results. ## Changes to QL libraries +* The class `ControlFlowNode` (and by extension `BasicBlock`) has until now + been directly equatable to `Expr` and `Stmt`. Exploiting these equalities, + for example by using casts, is now deprecated, and the conversions + `Expr.getControlFlowNode()` and `Stmt.getControlFlowNode()` should be used + instead. * The default set of taint sources in the `FlowSources` library is extended to cover parameters annotated with Spring framework annotations indicating remote user input from servlets. This affects all security queries, which