hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: convert UnsafeDeserialization test to .qlref

Browse Source
This commit is contained in:
Nora Dimitrijević
2025-06-23 17:21:16 +02:00
parent c4b0955045
commit 4412335223
15 changed files with 528 additions and 131 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/test/query-tests/security/CWE-502/ParcelableEntity.java
View File

@@ -29,7 +29,7 @@ public class ParcelableEntity implements Parcelable {
public ParcelableEntity createFromParcel(Parcel parcel) {
try {
Class clazz = Class.forName(parcel.readString());
Object obj = GSON.fromJson(parcel.readString(), clazz); // $unsafeDeserialization
Object obj = GSON.fromJson(parcel.readString(), clazz); // $ Alert
return new ParcelableEntity(obj);
}
catch (ClassNotFoundException e) {