Add method access qualifier as source

2026-04-30 11:15:13 +02:00 · 2020-06-27 18:00:52 -04:00
parent f5ca459795
commit 2ddeb0b169
1 changed files with 4 additions and 1 deletions
--- a/java/ql/src/semmle/code/java/dataflow/FlowSources.qll
+++ b/java/ql/src/semmle/code/java/dataflow/FlowSources.qll
@@ -346,7 +346,10 @@ private class AndroidIntentExtraSource extends RemoteFlowSource {
  AndroidIntentExtraSource() {
    exists(MethodAccess ma |
      ma instanceof IntentGetExtraMethodAccess and
-      this.asExpr().(VarAccess).getVariable().getAnAssignedValue() = ma
+      (
+        this.asExpr().(VarAccess).getVariable().getAnAssignedValue() = ma or
+        ma.getQualifier() = this.asExpr()
+      )
    )
  }