From 4e7438ac5c8319386ee26ed914d1f4ba0e52fee8 Mon Sep 17 00:00:00 2001 From: Tony Torralba Date: Fri, 21 Jul 2023 14:15:16 +0200 Subject: [PATCH] Make sure that InputStreamWrapperCapturedLocalStep is indeed local --- java/ql/lib/semmle/code/java/frameworks/InputStream.qll | 1 + 1 file changed, 1 insertion(+) diff --git a/java/ql/lib/semmle/code/java/frameworks/InputStream.qll b/java/ql/lib/semmle/code/java/frameworks/InputStream.qll index 8f37ecc24ea..fe433831386 100644 --- a/java/ql/lib/semmle/code/java/frameworks/InputStream.qll +++ b/java/ql/lib/semmle/code/java/frameworks/InputStream.qll @@ -39,6 +39,7 @@ private class InputStreamWrapperCapturedJumpStep extends AdditionalTaintStep { */ private class InputStreamWrapperCapturedLocalStep extends AdditionalTaintStep { override predicate step(DataFlow::Node n1, DataFlow::Node n2) { + n1.getEnclosingCallable() = n2.getEnclosingCallable() and exists(InputStreamRead m, NestedClass wrapper, SsaVariable captured, SsaImplicitInit capturer | wrapper.getASourceSupertype+() instanceof TypeInputStream and m.getDeclaringType() = wrapper and