hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Java: Use negative summary models in unsupported external api telemetry query.

Browse Source
This commit is contained in:
Michael Nebel
2022-08-26 13:47:31 +02:00
parent 23e0ee66e0
commit 290c35e7c6
4 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
java/ql/lib/semmle/code/java/dataflow/internal/NegativeSummary.qll Normal file
View File

@@ -0,0 +1,9 @@
/** Provides modules for importing negative summaries. */
/**
* A module importing the frameworks that provide external flow data,
* ensuring that they are visible to the taint tracking / data flow library.
*/
private module Frameworks {
private import semmle.code.java.frameworks.GeneratedNegative
}

6
java/ql/lib/semmle/code/java/frameworks/GeneratedNegative.qll Normal file
View File

@@ -0,0 +1,6 @@
/**
* A module importing all generated negative Models as Data models.
*/
private module GeneratedFrameworks {
private import apache.NegativeIOGenerated
}

1
java/ql/src/Telemetry/UnsupportedExternalAPIs.ql
View File

@@ -8,6 +8,7 @@
import java
import semmle.code.java.dataflow.internal.FlowSummaryImpl as FlowSummaryImpl
import semmle.code.java.dataflow.internal.NegativeSummary
import ExternalApi
private predicate getRelevantUsages(ExternalApi api, int usages) {