hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Expanded test suite of java/visible-for-testing-abuse

Browse Source
This commit is contained in:
Napalys Klicius
2025-08-06 12:55:08 +02:00
parent ff6ddd2893
commit 2a16f4829e
5 changed files with 157 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
java/ql/test/query-tests/VisibleForTestingAbuse/packageone/SourcePackage.java
View File

@@ -4,7 +4,31 @@ import packagetwo.Annotated;
public class SourcePackage extends Annotated {
void f() {
AnnotatedClass a = new AnnotatedClass(); // COMPLIANT - same package
// Fields - cross-package access (only accessible ones)
// String s = Annotated.m; // Cannot access package-private from different package
String s1 = Annotated.m1; // $ Alert
String s2 = Annotated.m2; // $ Alert
// String s3 = Annotated.m3; // Cannot access private field
// Methods - cross-package access (only accessible ones)
// int i = Annotated.f(); // Cannot access package-private from different package
// int i1 = Annotated.fPrivate(); // Cannot access private method
int i2 = Annotated.fPublic(); // $ Alert
int i3 = Annotated.fProtected(); // $ Alert
// Same package class
AnnotatedClass a = new AnnotatedClass(); // COMPLIANT - same package
// Lambda usage - cross-package (only accessible members)
Runnable lambda = () -> {
// String lambdaS = Annotated.m; // Cannot access package-private
String lambdaS1 = Annotated.m1; // $ Alert
String lambdaS2 = Annotated.m2; // $ Alert
// int lambdaI = Annotated.f(); // Cannot access package-private
int lambdaI2 = Annotated.fPublic(); // $ Alert
int lambdaI3 = Annotated.fProtected(); // $ Alert
};
lambda.run();
}
}