From 3db95f3ac9916c29bd263c46f44a711d7b35c7d2 Mon Sep 17 00:00:00 2001 From: Tony Torralba Date: Tue, 14 Mar 2023 12:28:04 +0100 Subject: [PATCH] javax.xml.transform.stream tests --- .../CWE-022/semmle/tests/TaintedPath.expected | 337 +++++++++--------- .../CWE-022/semmle/tests/mad/Test.java | 3 + 2 files changed, 174 insertions(+), 166 deletions(-) diff --git a/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected b/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected index b98cce2ea95..7e598f7df20 100644 --- a/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected +++ b/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected @@ -14,78 +14,80 @@ edges | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:12:99:33 | new URI(...) | | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:100:12:100:45 | new URI(...) | | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:101:12:101:54 | new URI(...) | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:24:61:24:68 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:26:41:26:48 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:28:56:28:63 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:30:46:30:53 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:32:38:32:45 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:34:36:34:43 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:36:31:36:38 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:38:33:38:40 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:40:27:40:34 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:41:27:41:34 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:42:34:42:41 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:44:40:44:47 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:45:48:45:55 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:46:47:46:54 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:48:40:48:47 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:50:38:50:45 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:52:33:52:40 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:54:33:54:40 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:56:41:56:48 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:58:42:58:49 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:60:37:60:44 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:62:29:62:36 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:64:37:64:44 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:66:28:66:35 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:68:33:68:40 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:70:40:70:47 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:72:40:72:47 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:73:40:73:47 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:75:38:75:45 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:77:28:77:35 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:78:28:78:35 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:79:28:79:35 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:81:34:81:41 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:82:34:82:41 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:84:50:84:57 | source(...) : String | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:86:54:86:61 | source(...) : String | -| mad/Test.java:24:61:24:68 | source(...) : String | mad/Test.java:24:52:24:68 | (...)... | -| mad/Test.java:26:41:26:48 | source(...) : String | mad/Test.java:26:32:26:48 | (...)... | -| mad/Test.java:28:56:28:63 | source(...) : String | mad/Test.java:28:47:28:63 | (...)... | -| mad/Test.java:30:46:30:53 | source(...) : String | mad/Test.java:30:39:30:53 | (...)... | -| mad/Test.java:32:38:32:45 | source(...) : String | mad/Test.java:32:31:32:45 | (...)... | -| mad/Test.java:34:36:34:43 | source(...) : String | mad/Test.java:34:29:34:43 | (...)... | -| mad/Test.java:36:31:36:38 | source(...) : String | mad/Test.java:36:24:36:38 | (...)... | -| mad/Test.java:38:33:38:40 | source(...) : String | mad/Test.java:38:24:38:40 | (...)... | -| mad/Test.java:40:27:40:34 | source(...) : String | mad/Test.java:40:20:40:34 | (...)... | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:25:61:25:68 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:27:41:27:48 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:29:56:29:63 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:31:46:31:53 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:33:38:33:45 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:35:36:35:43 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:37:31:37:38 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:39:33:39:40 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:41:27:41:34 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:42:27:42:34 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:43:34:43:41 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:45:40:45:47 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:46:48:46:55 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:47:47:47:54 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:49:40:49:47 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:51:38:51:45 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:53:33:53:40 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:55:33:55:40 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:57:41:57:48 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:59:42:59:49 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:61:37:61:44 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:63:29:63:36 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:65:37:65:44 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:67:28:67:35 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:69:33:69:40 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:71:40:71:47 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:73:40:73:47 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:74:40:74:47 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:76:38:76:45 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:78:28:78:35 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:79:28:79:35 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:80:28:80:35 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:82:34:82:41 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:83:34:83:41 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:85:33:85:40 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:87:50:87:57 | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:89:54:89:61 | source(...) : String | +| mad/Test.java:25:61:25:68 | source(...) : String | mad/Test.java:25:52:25:68 | (...)... | +| mad/Test.java:27:41:27:48 | source(...) : String | mad/Test.java:27:32:27:48 | (...)... | +| mad/Test.java:29:56:29:63 | source(...) : String | mad/Test.java:29:47:29:63 | (...)... | +| mad/Test.java:31:46:31:53 | source(...) : String | mad/Test.java:31:39:31:53 | (...)... | +| mad/Test.java:33:38:33:45 | source(...) : String | mad/Test.java:33:31:33:45 | (...)... | +| mad/Test.java:35:36:35:43 | source(...) : String | mad/Test.java:35:29:35:43 | (...)... | +| mad/Test.java:37:31:37:38 | source(...) : String | mad/Test.java:37:24:37:38 | (...)... | +| mad/Test.java:39:33:39:40 | source(...) : String | mad/Test.java:39:24:39:40 | (...)... | | mad/Test.java:41:27:41:34 | source(...) : String | mad/Test.java:41:20:41:34 | (...)... | -| mad/Test.java:42:34:42:41 | source(...) : String | mad/Test.java:42:20:42:41 | (...)... | -| mad/Test.java:44:40:44:47 | source(...) : String | mad/Test.java:44:33:44:47 | (...)... | -| mad/Test.java:45:48:45:55 | source(...) : String | mad/Test.java:45:33:45:55 | (...)... | -| mad/Test.java:46:47:46:54 | source(...) : String | mad/Test.java:46:40:46:54 | (...)... | -| mad/Test.java:48:40:48:47 | source(...) : String | mad/Test.java:48:33:48:47 | (...)... | -| mad/Test.java:50:38:50:45 | source(...) : String | mad/Test.java:50:31:50:45 | (...)... | -| mad/Test.java:52:33:52:40 | source(...) : String | mad/Test.java:52:26:52:40 | (...)... | -| mad/Test.java:54:33:54:40 | source(...) : String | mad/Test.java:54:26:54:40 | (...)... | -| mad/Test.java:56:41:56:48 | source(...) : String | mad/Test.java:56:34:56:48 | (...)... | -| mad/Test.java:58:42:58:49 | source(...) : String | mad/Test.java:58:35:58:49 | (...)... | -| mad/Test.java:60:37:60:44 | source(...) : String | mad/Test.java:60:30:60:44 | (...)... | -| mad/Test.java:62:29:62:36 | source(...) : String | mad/Test.java:62:22:62:36 | (...)... | -| mad/Test.java:64:37:64:44 | source(...) : String | mad/Test.java:64:30:64:44 | (...)... | -| mad/Test.java:66:28:66:35 | source(...) : String | mad/Test.java:66:21:66:35 | (...)... | -| mad/Test.java:68:33:68:40 | source(...) : String | mad/Test.java:68:26:68:40 | (...)... | -| mad/Test.java:70:40:70:47 | source(...) : String | mad/Test.java:70:33:70:47 | (...)... | -| mad/Test.java:72:40:72:47 | source(...) : String | mad/Test.java:72:33:72:47 | (...)... | +| mad/Test.java:42:27:42:34 | source(...) : String | mad/Test.java:42:20:42:34 | (...)... | +| mad/Test.java:43:34:43:41 | source(...) : String | mad/Test.java:43:20:43:41 | (...)... | +| mad/Test.java:45:40:45:47 | source(...) : String | mad/Test.java:45:33:45:47 | (...)... | +| mad/Test.java:46:48:46:55 | source(...) : String | mad/Test.java:46:33:46:55 | (...)... | +| mad/Test.java:47:47:47:54 | source(...) : String | mad/Test.java:47:40:47:54 | (...)... | +| mad/Test.java:49:40:49:47 | source(...) : String | mad/Test.java:49:33:49:47 | (...)... | +| mad/Test.java:51:38:51:45 | source(...) : String | mad/Test.java:51:31:51:45 | (...)... | +| mad/Test.java:53:33:53:40 | source(...) : String | mad/Test.java:53:26:53:40 | (...)... | +| mad/Test.java:55:33:55:40 | source(...) : String | mad/Test.java:55:26:55:40 | (...)... | +| mad/Test.java:57:41:57:48 | source(...) : String | mad/Test.java:57:34:57:48 | (...)... | +| mad/Test.java:59:42:59:49 | source(...) : String | mad/Test.java:59:35:59:49 | (...)... | +| mad/Test.java:61:37:61:44 | source(...) : String | mad/Test.java:61:30:61:44 | (...)... | +| mad/Test.java:63:29:63:36 | source(...) : String | mad/Test.java:63:22:63:36 | (...)... | +| mad/Test.java:65:37:65:44 | source(...) : String | mad/Test.java:65:30:65:44 | (...)... | +| mad/Test.java:67:28:67:35 | source(...) : String | mad/Test.java:67:21:67:35 | (...)... | +| mad/Test.java:69:33:69:40 | source(...) : String | mad/Test.java:69:26:69:40 | (...)... | +| mad/Test.java:71:40:71:47 | source(...) : String | mad/Test.java:71:33:71:47 | (...)... | | mad/Test.java:73:40:73:47 | source(...) : String | mad/Test.java:73:33:73:47 | (...)... | -| mad/Test.java:75:38:75:45 | source(...) : String | mad/Test.java:75:31:75:45 | (...)... | -| mad/Test.java:77:28:77:35 | source(...) : String | mad/Test.java:77:21:77:35 | (...)... | +| mad/Test.java:74:40:74:47 | source(...) : String | mad/Test.java:74:33:74:47 | (...)... | +| mad/Test.java:76:38:76:45 | source(...) : String | mad/Test.java:76:31:76:45 | (...)... | | mad/Test.java:78:28:78:35 | source(...) : String | mad/Test.java:78:21:78:35 | (...)... | | mad/Test.java:79:28:79:35 | source(...) : String | mad/Test.java:79:21:79:35 | (...)... | -| mad/Test.java:81:34:81:41 | source(...) : String | mad/Test.java:81:27:81:41 | (...)... | +| mad/Test.java:80:28:80:35 | source(...) : String | mad/Test.java:80:21:80:35 | (...)... | | mad/Test.java:82:34:82:41 | source(...) : String | mad/Test.java:82:27:82:41 | (...)... | -| mad/Test.java:84:50:84:57 | source(...) : String | mad/Test.java:84:41:84:57 | (...)... | -| mad/Test.java:86:54:86:61 | source(...) : String | mad/Test.java:86:45:86:61 | (...)... | +| mad/Test.java:83:34:83:41 | source(...) : String | mad/Test.java:83:27:83:41 | (...)... | +| mad/Test.java:85:33:85:40 | source(...) : String | mad/Test.java:85:26:85:40 | (...)... | +| mad/Test.java:87:50:87:57 | source(...) : String | mad/Test.java:87:41:87:57 | (...)... | +| mad/Test.java:89:54:89:61 | source(...) : String | mad/Test.java:89:45:89:61 | (...)... | nodes | Test.java:19:18:19:38 | getHostName(...) : String | semmle.label | getHostName(...) : String | | Test.java:24:20:24:23 | temp | semmle.label | temp | @@ -106,79 +108,81 @@ nodes | Test.java:99:12:99:33 | new URI(...) | semmle.label | new URI(...) | | Test.java:100:12:100:45 | new URI(...) | semmle.label | new URI(...) | | Test.java:101:12:101:54 | new URI(...) | semmle.label | new URI(...) | -| mad/Test.java:19:16:19:36 | getHostName(...) : String | semmle.label | getHostName(...) : String | -| mad/Test.java:24:52:24:68 | (...)... | semmle.label | (...)... | -| mad/Test.java:24:61:24:68 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:26:32:26:48 | (...)... | semmle.label | (...)... | -| mad/Test.java:26:41:26:48 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:28:47:28:63 | (...)... | semmle.label | (...)... | -| mad/Test.java:28:56:28:63 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:30:39:30:53 | (...)... | semmle.label | (...)... | -| mad/Test.java:30:46:30:53 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:32:31:32:45 | (...)... | semmle.label | (...)... | -| mad/Test.java:32:38:32:45 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:34:29:34:43 | (...)... | semmle.label | (...)... | -| mad/Test.java:34:36:34:43 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:36:24:36:38 | (...)... | semmle.label | (...)... | -| mad/Test.java:36:31:36:38 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:38:24:38:40 | (...)... | semmle.label | (...)... | -| mad/Test.java:38:33:38:40 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:40:20:40:34 | (...)... | semmle.label | (...)... | -| mad/Test.java:40:27:40:34 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:20:16:20:36 | getHostName(...) : String | semmle.label | getHostName(...) : String | +| mad/Test.java:25:52:25:68 | (...)... | semmle.label | (...)... | +| mad/Test.java:25:61:25:68 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:27:32:27:48 | (...)... | semmle.label | (...)... | +| mad/Test.java:27:41:27:48 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:29:47:29:63 | (...)... | semmle.label | (...)... | +| mad/Test.java:29:56:29:63 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:31:39:31:53 | (...)... | semmle.label | (...)... | +| mad/Test.java:31:46:31:53 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:33:31:33:45 | (...)... | semmle.label | (...)... | +| mad/Test.java:33:38:33:45 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:35:29:35:43 | (...)... | semmle.label | (...)... | +| mad/Test.java:35:36:35:43 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:37:24:37:38 | (...)... | semmle.label | (...)... | +| mad/Test.java:37:31:37:38 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:39:24:39:40 | (...)... | semmle.label | (...)... | +| mad/Test.java:39:33:39:40 | source(...) : String | semmle.label | source(...) : String | | mad/Test.java:41:20:41:34 | (...)... | semmle.label | (...)... | | mad/Test.java:41:27:41:34 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:42:20:42:41 | (...)... | semmle.label | (...)... | -| mad/Test.java:42:34:42:41 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:44:33:44:47 | (...)... | semmle.label | (...)... | -| mad/Test.java:44:40:44:47 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:45:33:45:55 | (...)... | semmle.label | (...)... | -| mad/Test.java:45:48:45:55 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:46:40:46:54 | (...)... | semmle.label | (...)... | -| mad/Test.java:46:47:46:54 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:48:33:48:47 | (...)... | semmle.label | (...)... | -| mad/Test.java:48:40:48:47 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:50:31:50:45 | (...)... | semmle.label | (...)... | -| mad/Test.java:50:38:50:45 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:52:26:52:40 | (...)... | semmle.label | (...)... | -| mad/Test.java:52:33:52:40 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:54:26:54:40 | (...)... | semmle.label | (...)... | -| mad/Test.java:54:33:54:40 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:56:34:56:48 | (...)... | semmle.label | (...)... | -| mad/Test.java:56:41:56:48 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:58:35:58:49 | (...)... | semmle.label | (...)... | -| mad/Test.java:58:42:58:49 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:60:30:60:44 | (...)... | semmle.label | (...)... | -| mad/Test.java:60:37:60:44 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:62:22:62:36 | (...)... | semmle.label | (...)... | -| mad/Test.java:62:29:62:36 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:64:30:64:44 | (...)... | semmle.label | (...)... | -| mad/Test.java:64:37:64:44 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:66:21:66:35 | (...)... | semmle.label | (...)... | -| mad/Test.java:66:28:66:35 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:68:26:68:40 | (...)... | semmle.label | (...)... | -| mad/Test.java:68:33:68:40 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:70:33:70:47 | (...)... | semmle.label | (...)... | -| mad/Test.java:70:40:70:47 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:72:33:72:47 | (...)... | semmle.label | (...)... | -| mad/Test.java:72:40:72:47 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:42:20:42:34 | (...)... | semmle.label | (...)... | +| mad/Test.java:42:27:42:34 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:43:20:43:41 | (...)... | semmle.label | (...)... | +| mad/Test.java:43:34:43:41 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:45:33:45:47 | (...)... | semmle.label | (...)... | +| mad/Test.java:45:40:45:47 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:46:33:46:55 | (...)... | semmle.label | (...)... | +| mad/Test.java:46:48:46:55 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:47:40:47:54 | (...)... | semmle.label | (...)... | +| mad/Test.java:47:47:47:54 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:49:33:49:47 | (...)... | semmle.label | (...)... | +| mad/Test.java:49:40:49:47 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:51:31:51:45 | (...)... | semmle.label | (...)... | +| mad/Test.java:51:38:51:45 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:53:26:53:40 | (...)... | semmle.label | (...)... | +| mad/Test.java:53:33:53:40 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:55:26:55:40 | (...)... | semmle.label | (...)... | +| mad/Test.java:55:33:55:40 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:57:34:57:48 | (...)... | semmle.label | (...)... | +| mad/Test.java:57:41:57:48 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:59:35:59:49 | (...)... | semmle.label | (...)... | +| mad/Test.java:59:42:59:49 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:61:30:61:44 | (...)... | semmle.label | (...)... | +| mad/Test.java:61:37:61:44 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:63:22:63:36 | (...)... | semmle.label | (...)... | +| mad/Test.java:63:29:63:36 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:65:30:65:44 | (...)... | semmle.label | (...)... | +| mad/Test.java:65:37:65:44 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:67:21:67:35 | (...)... | semmle.label | (...)... | +| mad/Test.java:67:28:67:35 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:69:26:69:40 | (...)... | semmle.label | (...)... | +| mad/Test.java:69:33:69:40 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:71:33:71:47 | (...)... | semmle.label | (...)... | +| mad/Test.java:71:40:71:47 | source(...) : String | semmle.label | source(...) : String | | mad/Test.java:73:33:73:47 | (...)... | semmle.label | (...)... | | mad/Test.java:73:40:73:47 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:75:31:75:45 | (...)... | semmle.label | (...)... | -| mad/Test.java:75:38:75:45 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:77:21:77:35 | (...)... | semmle.label | (...)... | -| mad/Test.java:77:28:77:35 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:74:33:74:47 | (...)... | semmle.label | (...)... | +| mad/Test.java:74:40:74:47 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:76:31:76:45 | (...)... | semmle.label | (...)... | +| mad/Test.java:76:38:76:45 | source(...) : String | semmle.label | source(...) : String | | mad/Test.java:78:21:78:35 | (...)... | semmle.label | (...)... | | mad/Test.java:78:28:78:35 | source(...) : String | semmle.label | source(...) : String | | mad/Test.java:79:21:79:35 | (...)... | semmle.label | (...)... | | mad/Test.java:79:28:79:35 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:81:27:81:41 | (...)... | semmle.label | (...)... | -| mad/Test.java:81:34:81:41 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:80:21:80:35 | (...)... | semmle.label | (...)... | +| mad/Test.java:80:28:80:35 | source(...) : String | semmle.label | source(...) : String | | mad/Test.java:82:27:82:41 | (...)... | semmle.label | (...)... | | mad/Test.java:82:34:82:41 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:84:41:84:57 | (...)... | semmle.label | (...)... | -| mad/Test.java:84:50:84:57 | source(...) : String | semmle.label | source(...) : String | -| mad/Test.java:86:45:86:61 | (...)... | semmle.label | (...)... | -| mad/Test.java:86:54:86:61 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:83:27:83:41 | (...)... | semmle.label | (...)... | +| mad/Test.java:83:34:83:41 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:85:26:85:40 | (...)... | semmle.label | (...)... | +| mad/Test.java:85:33:85:40 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:87:41:87:57 | (...)... | semmle.label | (...)... | +| mad/Test.java:87:50:87:57 | source(...) : String | semmle.label | source(...) : String | +| mad/Test.java:89:45:89:61 | (...)... | semmle.label | (...)... | +| mad/Test.java:89:54:89:61 | source(...) : String | semmle.label | source(...) : String | subpaths #select | Test.java:24:11:24:24 | new File(...) | Test.java:19:18:19:38 | getHostName(...) : String | Test.java:24:20:24:23 | temp | This path depends on a $@. | Test.java:19:18:19:38 | getHostName(...) | user-provided value | @@ -192,39 +196,40 @@ subpaths | Test.java:99:3:99:34 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:12:99:33 | new URI(...) | This path depends on a $@. | Test.java:95:14:95:34 | getHostName(...) | user-provided value | | Test.java:100:3:100:46 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:100:12:100:45 | new URI(...) | This path depends on a $@. | Test.java:95:14:95:34 | getHostName(...) | user-provided value | | Test.java:101:3:101:55 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:101:12:101:54 | new URI(...) | This path depends on a $@. | Test.java:95:14:95:34 | getHostName(...) | user-provided value | -| mad/Test.java:24:52:24:68 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:24:52:24:68 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:26:32:26:48 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:26:32:26:48 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:28:47:28:63 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:28:47:28:63 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:30:39:30:53 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:30:39:30:53 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:32:31:32:45 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:32:31:32:45 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:34:29:34:43 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:34:29:34:43 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:36:24:36:38 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:36:24:36:38 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:38:9:38:41 | new FileReader(...) | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:38:24:38:40 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:40:20:40:34 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:40:20:40:34 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:41:20:41:34 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:41:20:41:34 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:42:20:42:41 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:42:20:42:41 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:44:33:44:47 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:44:33:44:47 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:45:33:45:55 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:45:33:45:55 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:46:40:46:54 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:46:40:46:54 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:48:33:48:47 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:48:33:48:47 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:50:31:50:45 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:50:31:50:45 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:52:26:52:40 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:52:26:52:40 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:54:26:54:40 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:54:26:54:40 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:56:34:56:48 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:56:34:56:48 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:58:35:58:49 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:58:35:58:49 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:60:30:60:44 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:60:30:60:44 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:62:22:62:36 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:62:22:62:36 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:64:30:64:44 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:64:30:64:44 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:66:21:66:35 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:66:21:66:35 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:68:26:68:40 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:68:26:68:40 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:70:33:70:47 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:70:33:70:47 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:72:33:72:47 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:72:33:72:47 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:73:33:73:47 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:73:33:73:47 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:75:31:75:45 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:75:31:75:45 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:77:21:77:35 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:77:21:77:35 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:78:21:78:35 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:78:21:78:35 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:79:21:79:35 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:79:21:79:35 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:81:27:81:41 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:81:27:81:41 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:82:27:82:41 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:82:27:82:41 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:84:41:84:57 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:84:41:84:57 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | -| mad/Test.java:86:45:86:61 | (...)... | mad/Test.java:19:16:19:36 | getHostName(...) : String | mad/Test.java:86:45:86:61 | (...)... | This path depends on a $@. | mad/Test.java:19:16:19:36 | getHostName(...) | user-provided value | +| mad/Test.java:25:52:25:68 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:25:52:25:68 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:27:32:27:48 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:27:32:27:48 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:29:47:29:63 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:29:47:29:63 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:31:39:31:53 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:31:39:31:53 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:33:31:33:45 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:33:31:33:45 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:35:29:35:43 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:35:29:35:43 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:37:24:37:38 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:37:24:37:38 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:39:9:39:41 | new FileReader(...) | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:39:24:39:40 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:41:20:41:34 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:41:20:41:34 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:42:20:42:34 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:42:20:42:34 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:43:20:43:41 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:43:20:43:41 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:45:33:45:47 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:45:33:45:47 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:46:33:46:55 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:46:33:46:55 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:47:40:47:54 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:47:40:47:54 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:49:33:49:47 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:49:33:49:47 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:51:31:51:45 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:51:31:51:45 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:53:26:53:40 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:53:26:53:40 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:55:26:55:40 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:55:26:55:40 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:57:34:57:48 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:57:34:57:48 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:59:35:59:49 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:59:35:59:49 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:61:30:61:44 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:61:30:61:44 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:63:22:63:36 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:63:22:63:36 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:65:30:65:44 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:65:30:65:44 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:67:21:67:35 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:67:21:67:35 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:69:26:69:40 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:69:26:69:40 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:71:33:71:47 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:71:33:71:47 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:73:33:73:47 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:73:33:73:47 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:74:33:74:47 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:74:33:74:47 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:76:31:76:45 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:76:31:76:45 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:78:21:78:35 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:78:21:78:35 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:79:21:79:35 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:79:21:79:35 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:80:21:80:35 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:80:21:80:35 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:82:27:82:41 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:82:27:82:41 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:83:27:83:41 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:83:27:83:41 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:85:26:85:40 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:85:26:85:40 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:87:41:87:57 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:87:41:87:57 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | +| mad/Test.java:89:45:89:61 | (...)... | mad/Test.java:20:16:20:36 | getHostName(...) : String | mad/Test.java:89:45:89:61 | (...)... | This path depends on a $@. | mad/Test.java:20:16:20:36 | getHostName(...) | user-provided value | diff --git a/java/ql/test/query-tests/security/CWE-022/semmle/tests/mad/Test.java b/java/ql/test/query-tests/security/CWE-022/semmle/tests/mad/Test.java index abb6f37fd9c..f2040c93aae 100644 --- a/java/ql/test/query-tests/security/CWE-022/semmle/tests/mad/Test.java +++ b/java/ql/test/query-tests/security/CWE-022/semmle/tests/mad/Test.java @@ -9,6 +9,7 @@ import java.net.URL; import java.nio.charset.Charset; import java.nio.file.Files; import java.nio.file.Path; +import javax.xml.transform.stream.StreamResult; import org.codehaus.cargo.container.installer.ZipURLInstaller; public class Test { @@ -80,6 +81,8 @@ public class Test { // "java.nio.file;Files;false;writeString;;;Argument[0];create-file;manual" Files.writeString((Path) source(), (CharSequence) null); Files.writeString((Path) source(), (CharSequence) null, (Charset) null); + // "javax.xml.transform.stream;StreamResult";true;"StreamResult;(File);;Argument[0];create-file;ai-generated" + new StreamResult((File) source()); // "org.codehaus.cargo.container.installer;ZipURLInstaller;true;ZipURLInstaller;(URL,String,String);;Argument[1];create-file;ai-generated" new ZipURLInstaller((URL) null, (String) source(), ""); // "org.codehaus.cargo.container.installer;ZipURLInstaller;true;ZipURLInstaller;(URL,String,String);;Argument[2];create-file;ai-generated"