hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-01 05:13:41 +01:00
Code Issues Packages Projects Releases Wiki Activity

Java: add Vector::copyInto, BlockingQueue::drainTo

Browse Source
This commit is contained in:
Arthur Baars
2020-07-07 20:34:13 +02:00
parent c9ae2c8b2c
commit 441bf98ce7
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
java/ql/src/semmle/code/java/dataflow/internal/ContainerFlow.qll
View File

@@ -181,9 +181,10 @@ private predicate qualifierToMethodStep(Expr tracked, MethodAccess sink) {
private predicate qualifierToArgumentStep(Expr tracked, RValue sink) {
exists(MethodAccess ma |
ma.getMethod().(CollectionMethod).hasName("toArray") and
// java.util.Vector, java.util.concurrent.BlockingQueue, java.util.Collection
ma.getMethod().(CollectionMethod).hasName(["copyInto", "drainTo", "toArray"]) and
tracked = ma.getQualifier() and
sink = ma.getArgument(1)
sink = ma.getArgument(0)
)
}