hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Better HostnameVerificationCall.isIgnored()

Browse Source
This commit is contained in:
Artem Smotrakov
2022-02-12 15:52:16 +00:00
parent 36e565d673
commit 48604cd7b3
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
java/ql/src/experimental/Security/CWE/CWE-297/IgnoredHostnameVerification.ql
View File

@@ -22,9 +22,9 @@ private class HostnameVerificationCall extends MethodAccess {
/** Holds if the result of the call is not used. */
predicate isIgnored() {
not exists(Expr expr, IfStmt ifStmt, MethodAccess ma |
this = [expr.getAChildExpr(), ifStmt.getCondition(), ma.getAnArgument()]
)
not exists(Expr expr | this = expr.getAChildExpr()) and
not exists(IfStmt ifStmt | this = ifStmt.getCondition()) and
this = any(ExprStmt es).getExpr()
}
}