hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Remove list, map, and StringReplaceMethod flow steps.

Browse Source
This commit is contained in:
Anders Schack-Mulligen
2020-07-06 14:19:13 +02:00
parent a41c2d8abf
commit 2ae15f9ace
1 changed files with 0 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
java/ql/src/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll
View File

@@ -377,19 +377,6 @@ private predicate taintPreservingQualifierToMethod(Method m) {
or
m = any(ProtobufMessageLite p).getAGetterMethod()
or
m instanceof MapMethod and
(
m.getName().regexpMatch("get|entrySet|keySet|values")
)
or
m.getDeclaringType().getSourceDeclaration().getASourceSupertype*().hasQualifiedName("java.util", "List") and
(
m.getName().regexpMatch("get|toArray|subList|spliterator|set|iterator|listIterator") or
(m.getName().regexpMatch("remove") and not m.getReturnType() instanceof BooleanType)
)
or
m instanceof StringReplaceMethod
or
exists(SpringUntrustedDataType dt |
m.(GetterMethod) = dt.getAMethod()
)