From 2c41c5b0e23dc98b2f93ba874e2caea69164f251 Mon Sep 17 00:00:00 2001 From: Tony Torralba Date: Tue, 9 May 2023 17:27:16 +0200 Subject: [PATCH] Make inputStreamWrapper consider supertypes transitively --- .../semmle/code/java/dataflow/internal/TaintTrackingUtil.qll | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll b/java/ql/lib/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll index 874c08bdaba..044b250e473 100644 --- a/java/ql/lib/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll +++ b/java/ql/lib/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll @@ -256,7 +256,7 @@ private class BulkData extends RefType { */ private predicate inputStreamWrapper(Constructor c, int argi) { c.getParameterType(argi) instanceof BulkData and - c.getDeclaringType().getASourceSupertype().hasQualifiedName("java.io", "InputStream") + c.getDeclaringType().getASourceSupertype*().hasQualifiedName("java.io", "InputStream") } /** An object construction that preserves the data flow status of any of its arguments. */